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Description 

BACKGROUND OF THE INVENTION 
5 Field of the Invention 

[0001 ] The present invention relates to expert systems (also known as knowledge-based systems); to process control 
systems, and to hybrids thereof, 

10 Discussion of Related Art 

[0002] Various known teachings which are believed to be related to the various embodiments disclosed in the present 
application will now be discussed. However, applicant specifically notes that not every idea discussed in this section 
is necessarily prior art. For example, the characterizations of the particular patents and publications discussed may 

1$ relate them to inventive concepts in a way which is itself based on knowledge of some of the inventive concepts. 
Moreover, the following discussion attempts to fairly present various suggested technical alternatives (to the best of 
applicant's knowledge), even though the teachings of some of those technical alternatives may not be "prior art 11 under 
the patent laws of the United States or of other countries. Similarly the Summary of the Invention section of the present 
application may contain some discussion of prior art teachings, interspersed with discussion of generally applicable 

20 innovative teachings and/or specific discussion of the best mode as presently contemplated, and applicant specifically 
notes that statements made in the Summary section do not necessarily delimit the various inventions claimed in the 
present application or in related applications. 

Process Control Generally 

25 

[0003] To compete in global markets, manufacturers must continually improve the quality and cost of manufacture 
of their products. They must do this in the face of changing market needs, changing raw materials costs, and reduced 
staffing. Automatic computer control of the manufacturing process can play an important part in this, especially in the 
chemical process industry. Most process plants already have the basic automatic regulating controls (low level controls) 
30 needed to control the plant at a given operating point. These provide the foundation for higher level supervisory controls 
{referred to here as supervisor procedures or supervisors) that seek to improve quality, reduce cost, and increase plant 
uptime by moving the plant to a different operating point. These changes can be made directly via the lower level 
controls,, or indirectly via the piant operator ... 

[0004] Although supervisory controls have been in use for years, they have lacked a number of desirable features. 
35 Jo best improve quality and cost, a supervisor procedure should: 

help control the quality of the end product; 
reduce the cost of operating the plant; 
help avoid unnecessary upsets or shutdowns; 
40 - work effectively with plant operators; 

act in concert with standard operating procedures; and 
be supportable by plant operating and support people. 

[0005] To measure quality, a supervisor procedure should ideally have access to measurements of the basic prop- 
45 erties of the product which affect itsvalueand usefulness to the customer Since most product properties measurements 
are sampled (and are measured in a laboratory), the supervisor should have access to a historical process database 
which can store these measurements as well the basic process data from the lower level control systems. Since sam- 
pled measurements and the process itself normally include some components of random variation, the supervisor 
should include statistical tests which can determine if a sequence of sampled measurements is varying normally around 
bo its aim value (La. is "on aim"), or has shifted significantly from aim (is "off aim"). 

[0006] To control quality a supervisor procedure should have the capability to change the operating point of the 
process (via the lower leve! controls) when a measured property goes off aim. It should have the ability to act in response 
to new data or statistical tests, or to act at regular time intervals. It should also be able to preemptively change the 
operating point when basic conditions (such as plant production rate) change. It should allow a number of independent 
55 control objectives, and new ones should be easy to add. Since the process may use any number of different low level 
controllers, the supervisor should be able to communicate with all of them. 

[0007] To work effectively with plant operators, a supervisor procedure should be understandable. It should carry 
out its control actions in a way that is natural and understandable to operators. It should provide enough information 
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about its current state and its past actions for the operator to judge Its performance, ft should inform the operator when 
it acts {or chooses not to act), explaining how much action was taken, where it was taken : why it was done, and what 
effect it might have. Since the effect of actions taken to control quality and reduce cost can last longer than a single 
shift, it should provide a record of all its actions, 

$ [0008] To act appropriately under aN circumstances, to reduce operating costs in a way consistent with quality, to 
help avoid unnecessary upsets and shutdowns, and to take operating procedures into account, a supervisor should 
ideally include the logical decision making capabilities of expert systems. Because decisions will normally focus on a 
specific task or area, many independent expert systems should be allowed. The expert systems should have access 
to the many sources of process measurements, laboratory measurements, and control system parameters. They should 

io be able to reason symbolically using that information, and to make their decisions take effect through communication 
and control actions. To work effectively, the supervisor should be able to control 'as expert system functions in concert 
with its other functions. 

[0009] To be supported by plant personnel, the supervisor should be easy to use. it should aiiow common control 
actions to be set up easily, with a means of customizing iess common functions, It should allow control actions to be 
15 changed easily. It should have a simple means of specifying the informative messages to be generated about it actions. 
■ Its expert systems should allow process knowledge to be entered, stored, and updated in a way that plant support 
: people understand. It should provide a simple, appropriate knowledge representation which naturally includes data 
" retrieval, symbolic reasoning, and effective means of implementing decisions in the piant. The knowledge structure 
should allow any authorized plant expert to enter knowledge, without restricting access to those who know computer 
20 languages or have memorized special rule structures. 

[0010] The present invention addresses many of these concerns, 

[001 1] Normaiiy supervisory control has been thought of separately from another higher level of control called opti- 
mizing control, which seeks to minimize operating cost. In some cases, the requirement to minimize variation in product 
properties (i.e. to improve product quality) is absolutely primary, so that cost optimization only be performed as an 
25 objective secondary to quality objectives. In this environment, use of classical optimization techniques to achieve cost 
optimization may not be possible. In other cases, it has been possible to integrate a balance of supervisory and opti- 
mizing control into the supervisor. 

Modularity 

30 

[0012] Supervisory control systems using a modular structure are well known. For example, the Process Monitoring 
and GontroMOGQ (PMC-1000) control package marketed by Hewlett Packard is a modular control package which can 
function as a supervisory control system. PMC modules, called blocks, perform alarming and limiting, proportional/ 
integral/derivative control, trending, driving an electrical output, running programs, and other functions. Each block 

3S writes one or more output values into memory. To build PMC control structures, the user creates as many blocks as 
needed and links them to other block output values. A new runnable system must then be generated. Once the system 
is running, parameters such as gain constants can be changed, but the linking of blocks is fixed, PMC runs on a base 
time cycle, and blocks can only be scheduled to execute at multiples of the base cycle time. Although PMC maintains 
a historical database, it cannot be used for control, and does not effectively store intermittently sampied data. It is 

4o believed that there is no maximum number of blocks. 

[001 3] It is believed that some earlier discussion of the significance of modularity in process control software is found 
in Watson, "Process Control Using Modular Package Software," IEH Conference Publications number 102 (1973), 

Historical Process Database 

45 

[0014] A database of historical process data is generally described in Hale and Sellars, "Historical Data Recording 
for Process Computers," 77 Chem. Eng'q Progress 36 (1981), 

Continuous Q ontxojjActjons 

so 

[001 5] In classical feedback and feedforward control, the prior art teaches that the best control results are achieved 
by making continuous changes to the process, in computer control, where cyclic operation forces changes to be made 
in discrete steps, many small, frequent steps are conventionally preferred. While in principle this gives the best possible 
control performance, such control actions are very difficult to visualize. In fact, it may be impossible to determine what 
ss actions have been taken by what control strategies, and how long the control strategies have been making changes. 
This makes it very difficult to Judge whether control strategies are working properly, or even if they are working at all. 
This method of control also runs counter to the methods used by operators, who generally make a few significant 
changes and wait to see the effects. 
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[0016] In feedback control, the use of a deadband is a well known way of avoiding small actions caused by a noisy 
measurement. (That is, if the control variable falls within a specified deadband of values surrounding the goal value, 
the control value will not be manipulated.) This deadband, as is well known, helps to avoid instability in control systems. 
Statistical process control also tends to reduce the number of feedback control actions. However, neither technique is 

£ sufficient to make all control actions understandable, since some actions will not be considered noisy. 

[0017] The use of a feedforward relation among control variables is also well known among those skilled in the art 
of process control. That is, in some cases, whenever one variable changes {e.g. if a particular control variable is 
manipulated for any reason), another variable will also be manipulated according to a predetermined relationship. For 
example, in a distillation process, \\ may be desirable to immediately decrease the heat input whenever the rate of feed 

10 of the crude feed stock is decreased. In feedforward control, a deadband is normally not used. 

Control of Multiple Manipulated Variables 

[0018] In many process control applications, several manipulated variables must be jointly controlled in a single 
is contro) loop (e.g. in some relation to a single measured variable). A special {and very common) case of this is seen in 
many situations where a single manipulated variable can normally be used, but alternate manipulated variables should 
be used instead if the first-choice manipulated variable becomes constrained. When human operators optimally handle 
problems of this kind, their choice of which output to change will often be made heuristically, based on cost, quality, 
response dynamics, and process stability. 
20 [0019] "Decoupling - is a conventional way of reducing multi-input multi-output problems to sets of single-input single- 
output problems. In decoupling, it is usually assumed that ail of the manipulated variables should be changed. 
[0020] A different but related problem arises when a number of manipulated variables (''knobs") can be changed to 
respond to a single measured variable. Operators often use a heuristic approach in choosing which knob (or knobs) 
to manipulate, and sometimes choose nottoact. The heuristic approach may consider cost, quality, response dynamics, 
25 and process stability. It may include alternate knobs to be used when all of the preferred knobs are constrained. Classic 
control methods are not well suited to this approach. 

Expert Systems Generally 

so [0021] The term "expert system" is used in the present application (in accordance with what is believed to be the 
general usage at present) to refer to a system which includes non-trivial amounts of knowledge about an underlying 
problem. Almost any control system which has been customized for a particular application might be argued to embody 
small amounts of relevant knowledge in its very structure, but the term expert system is generally used only for systems 
which contain enough accessible information that they can usefully supplement the knowledge of at least some (but 

35 normally not . af I) human users who must deal with problems of the type addressed. Expert systems at their best may 
serve to codify the expert knowledge of one person (a "domain expert"), so that that person's expertise can be distributed 
and made accessible to many less expert users who must address problems of a certain type. Some well-known 
successful examples include a medical diagnostic program (MYCIN) and a diagnostic prog ram which assists mechanics 
working on diesel' engines. 

40 [0022] As these examples show, one very common area of application for expert systems has been fault diagnosis. 
Many other areas of application have been recognized; see generally Expert Systems (ed. R. Forsythe 1984) ; R 
Harmon and D. King, Expert Systems (1 985) ; and Donald Waterman, A Guide to Expert Systems (1 984). 

Knowledge Input and Updating 

[0023] One of the very general problems in the area of expert systems is how knowledge is to be gotten into an 
expert system in the first place. That is, specialists in artificial intelligence often assume that a "knowledge engineer" 
{that is, a person who is experienced and competent in the specialized computer languages and software commonly 
used for artificial intelligence applications) will interview a "domain expert" (that is, a person who actually has expert 

50 knowledge of the type of problems which the expert system is desired to be able to address) to extract his expertise 
and program an expert system accordingly However, there are some very important drawbacks to this paradigm. First, 
competent "knowledge engineers" are not readily available. \n particular, the requirements of maintaining a real-world 
application (such as an expert system for chemicaf process control, as in the preferred embodiments disclosed below) 
are such that it is dangerous to rely on a sufficient supply of "knowledge engineers" to go through the iterations nec- 

55 essary to not only input the knowledge base reliably, but also maintain the software base once it is created. 

[0024] The rapidly developing art of software engineering has shown that one of the key requirements for a large 
software system is that it be maintainable. Thus, for example, the software system must be set up so that, after the 
technologist who first puts together an expert system is gone, it can be maintained, modified, and updated as necessary 
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by bis successors. 

[0025] Thus, one key problem in the area of expert systems is the problem of maintenance and updating. Especially 
in more complex real-worid applications, it is necessary that a large software structure, such as that required for a 
sophisticated expert system, be maintainable. For example, in an expert control system, control strategies may be 

5 modified i new control strategies may be introduced, sensor and/or actuator types and/or locations may be changed, 
and the economic factors relevant to cost versus throughput versus purity tradeoffs may change. Normally expert 
systems attempt to maintain some degree of maintainability by keeping the inference rules which the processor exe- 
cutes separate from the software structure for the processor itself. However, this normally tends to lead to a larger 
software structure which operates more slowly 

to [0026] Specialists in expert systems also commonly assume that expert systems must be built in a symbolic process- 
ing environment, e.g. in environments using LISP or PROLOG. Even for complex processes, a single large knowledge 
base is usually assumed. The program which processes the knowledge therefore requires complex procedures for 
processing the knowledge base, and these are typically coded separately from the knowledge. This leads to iarge 
software structures which execute slowly on conventional computers. Specialized "LISP machines* are commonly 

IB recommended to speed up the inference process. 

Expert System Knowledge Structures 

[0027] Published material regarding knowledge based systems (expert systems) has proposed several classifica- 
20 tions for the types of rules which are to be used. For example, US. Patent No. 4,658,370 to Erman et aj . describes "a 
tool, for building and interpreting a knowledge base having separate portions encoding control knowledge, factual 
knowledge, and judgmental rules." (Abstract). The method described in this patent still appears to rely on the availability 
of a "knowledge engineer This patent appears to focus on the application of an expert system as a consultation driver 
for extracting the relevant items of knowledge from a human observer. Knowledge is separated into factual knowledge 
25 such as classes, attributes, allowed values, etc, which describe the objects in the domain; judgmental knowledge, 
which describes the domain (and its objects} in the form of rules; and control knowledge describing the problem solving 
process to be used by the inference procedure in processing the knowledge. (The control knowledge has nothing to 
do with control of an external process.) This knowledge structure is designed to make the task of knowledge engineering 
easier, and to make the knowledge system and its reasoning during a consultation easier to understand. The knowledge 
30 base is written in a specialized programming language. This is a very powerful structure, which requires a very high 
skill level. 

[0028] Expert system development tools which are designed to make the input o1 knowledge easier have been de- 
veloped. U.S. Patent 4,648,044 to Hardy, et a) ., describes ft a tool for building a knowledge system., [which] includes a 
knowledge base in an easily understood English-like language expressing facts, rules, and meta-facts for specifying 
35 how the rules are to be applied to solve a specific problem". (Abstract). 

Although this tool is not as complex as some current expert systems tools, the knowledge must be entered in a rigidly 
structured format. The user must learn a specialized language before he can program the knowledge base. Despite 
some simplification in the development process, a fairly high skill level is still required. 

40 Expert Systems for Process Control 

[0029] Chemical processing plants are so complex that few people develop expertise except in limited areas of the 
process. Plants run around the clock, production rates on a single line are very high, and startup is usually long and 
costly so improper operation can be very costly. It has also been found that, in a complex chemical processing plant, 
45 some operators can achieve substantially higher efficiencies than others, and It would be advantageous if the skill level 
of the best operators could be made generally available. Expert systems promise significant benefits in real-time anal- 
ysis and control by making scarce expertise more widely available. However, application of expert systems in this area 
has not progressed as far as it has in interactive, consultative uses. 

[0030] Integration of expert system software with process control software poses special problems: 
50 [0031] First, there is the problem of how the software structure for an expert system is to be combined with the 
software for a process control system. Several expert systems which have been suggested for process control have 
used an expert system as the top-level supervisor procedure for the control system. 

[0032] Second, as discussed above, many process control strategies have difficulty with situations where there are 
multiple control parameters (inputs to the process) which could be manipulated. That is, for processes which have only 
55 one primary control parameter (as many do), the problem of what value to set for that control parameter is in significant 
ways a much simpler problem than the question of which one or ones of multiple control parameters should be ad- 
dressed, and in which direction. 

[0033] It should also be noted that the use of an expert system to design a new process (or to debug a newly intro- 
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duced process) has significantly different features from the problem of optimally controlling an existing process. Sim- 
ilarly, while expert systems have also been applied to the automatic distribution of jobs to multiple work-stations through 
an automated materials handling system (an example of this is the DISPATCHER Factory Control System developed 
by Carnegie Group Inc.), the queuing problems presented by the allocation of different types of materials in batches 
to many parallel assembly workstations making different products are quite different from the problems in continuously 
operating single line processes, particularly chemical processes, 

"RESCU" 

[0034] The system known as "RESCU" resulted from a collaborative demonstration project between British govern- 
ment and industry. See, eg. , Shaw, "RESCU online real-time artificial intelligence," 4 Computer- Aided Engineering J, 
29 {1 987) ; and the Digest of the IEE Colloquium on 'Real-Time Expert Systems in Process Control*, held 29 November 
1 985 at Satford, U.K.. From available information, it appears that this is a real-time expert system which was developed 
to provide advice on quality control in an detergent plant. The system searches for a hypothesis about the plant which 
is supported by process data, and uses it as the basis for advice. This system also uses a single knowledge base for 
the entire plant and thus requires complex inference control methods. 

"Falcon" 

[0035] "Falcon" is a fault diagnosis system for a chemical reactor, which monitors up to 30 process measurements 
and seeks to identify a set of up to 25 failures in the process, This was developed as a demonstration project between 
DuPont, the Foxboro Company, and the University of Delaware, and is described, for example, in D. Rowan, "Using 
an Expert System for Fault Diagnosis," in the February 1987 issue of Control Engineering . See also "Troubleshooting 
Comes On Line in the CPJ" in the October 13, 1986, issue of Chemical Engineering at page 14. This system required 
several man years of development, and because it is programmed in LISP, it has proven difficult to maintain the knowl- 
edge base through process changes. 

"ONSPEC Superintendent" 

[0036] The "ONSPEC Superintendent" (TM) ( marketed by Heuristics Inc., is a real-time expert systems package 
which monitors data from the ONSPEC (TM) control system. See Manoff , "On-Line Process Simulation Techniques in 
Industrial Control including Parameter identification and Estimation Techniques/ 1 in Proceedings of the Eleventh Annual 
Advanced Control Conference (1985) ; and Manoff, "Control Software Comes to Personal Computers," at page 66 of 
the March 1 984 Issue of Control Engineering . The "Superintendent" monitors for conformance with safety and control 
procedures and documents exceptions. It can also notify operators, generate reports, and cause control outputs. 

"PICON" 

[0037] The PICON (TM) system, which was marketed by Lisp Machines, Inc. (LMI), was apparently primarily intended 
for real-time analysis of upset or emergency conditions in chemical processes. It can monitor up to 20,000 input process 
measurements or alarms from a distributed control system, it uses a single knowledge base (e.g. containing thousands 
of rules) for an entire process. To handle such a large number of rules, it runs on a LISP computer and includes complex 
inference control methods. PICON must be customized by a LISP programmer before the knowledge base can be 
entered. The domain expert then enters knowledge through a combination of graphics icons and Lisp-like rule con- 
structions. See, for example, L. Hawkinson et aL "A Real-Time Expert System for Process Control," in Artificial Intel- 
ligence Applications in Chemistry (American Chemical Society 1986), and the R. Moore et aL article in the May 1985 
issue of InTech at page 55. 

Self-tuning Controllers 

[0038] Another development which should be distinguished is work related to so-called "self-tuning controllers/ 1 Self- 
tuning single- and multiple-loop controllers contain real-time expert systems which analyze the performance of the 
controller (See "Process Controllers Don Expert Guises 11 , in Chemical Eng'g, June 24, 1985). These expert systems 
adjust the tuning parameters of the controller They affect only low-level parts of the system, and use a fixed rule base 
embedded in a microprocessor. 

[0039] The paper 'Use of Expert Systems in Closed Loop Feedback Control' by K.E. Arzen, Proc. 1986 America! 
Control Conference, 18 June 1 986 IEEE, New York, discloses a control system for controlling a substantially continuous 
process having a number of sensors for sensing conditions in the process, a number of actuators for changing condi- 
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tions in the process, a controller for controlling the operation of the actuators in accordance with data received from 
the sensors and in accordance with control parameters and a process supervisor which supervises the controller by 
selectively defining one or more of the control parameters in dependence upon data received from the process, 
[0040] The paper 'Expert Identification and Control* by S.R Sanoff and RE. Wellstead, Proc. 1 985 IFAC Identification 
5 and System Parameter Estimation, York, UK, discloses a desired system which will assist an operator to commission 
and manage a self-tuner on-line. The system employs expert systems in order to simplify the task of commissioning 
and operating self-tuning controllers. 

SUMMARY OF THE INVENTION 

10 

[0041] The present invention provides a computer-based method for operating a substantially continuous process, 
comprising the steps of: (i) operating the process with one or more sensors arranged to sense conditions in the process, 
and one or more actuators arranged to change conditions in the process; (H) controlling one or more of said actuators 
with a process controller in accordance with signals received from one or more of said sensors and in accordance with 

is one or more control parameters; and (til) running a process supervisor procedure for supervising the operation of said 
controlling step by selectively defining one or more of said control parameters in dependence upon data received 
indirectly and/or directly from said process; characterised by providing a plurality of expert subprocedures, each for 
performing a respective different expert task relating to the process using a knowledge base and inference structure 
relevant to the process, and for outputting expert advice data; and in that said process supervisor procedure runs 

20 independently of said controlling step and uses a plurality of substantially self-contained software modules, each mod- 
ule defining a procedure for performing a desired task, and wherein said process supervisor procedure is arranged to 
call, under predefined conditions, said expert subprocedures which output said expert advice data for use by said 
supervisor procedure in selectively defining said one or more control parameters, 

[0042] The present invention also provides a computer-based apparatus for controlling a substantially continuous 
25 process, comprising: {a) one or more sensors for sensing conditions in the process, and one or more actuators for 
changing conditions in the process; (b) a process controller for controlling one or more of said actuators in accordance 
with sense data generated by at least one of said sensors and in accordance with respective control parameters; and 
(c) process supervisor means arranged to receive data indirectly and/or directly from said process and operable for 
supervising the operation of said process controller by selectively defining one or more of said control parameters in 
so dependence upon said received data; characterised in that a plurality of expert subprocedure means are provided, 
each for performing a respective different expert task relating to the process using a knowledge base and inference 
structure relevant to the process and for outputting expert advice data; and in that said process supervisor means is 
operable independently of said process controller and comprises: (i) a plurality of substantially self-contained software 
modules > each module defining a procedure for performing a desired task; and (it) means for calling, under predefined 
35 conditions, at least one of said plurality of expert systems which outputs said expert advice data for use by said process 
supervisor means in selectively defining said one or more control parameters. 

[0043] In this section various features of the embodiments described in the present application will now be discussed, 
and some of their respective advantages described. Of course, not all of the discussions in this section define necessary 
features of the invention for at least the following reasons: 1} various parts of the following discussion will relate to 

40 some (but not all) classes of novel embodiments disclosed; 2) various parts of the following discussion wiH relate to 
innovative teachings disclosed but not claimed in this specific application as filed; 3) various parts of the folbwing 
discussion will relate specifically to the "best mode contemplated by the inventor of carrying out his invention 11 and will 
therefore discuss features which are particularly relatedto this subclass of embodiments, and are not necessary parts 
of the claimed invention; and 4) the following discussion is generally quite heuristic, and therefore focusses on particular 

45 points without explicitly distinguishing between the features and advantages of particular subclasses of embodiments 
and those inherent in the invention generally 

[0044] Various classes of embodiments described herein provide a process control system, wherein a process which 
operates substantially continuously is controlled by a system which includes (in addition to a process control system 
which is closely coupled to the underlying process and which operates fairly close to real time, Le. which has a maximum 
so response time less than the minimum response time which would normally be necessary to stably control the underlying 
process) at least some of the following features: 

1 ) A supervisor procedure, which has a modular structure, and retrieves process measurements from the process 
control system (or other process data collection systems), passes control parameters to the process control system, 
S5 and communicates with people. Preferably, the supervisor includes the capability for statistical process control. 

The supervisor preferably runs on a computer system separate from the process control system. 
2} The supervisor procedure can preferably call on one or more expert system procedures as subroutines. This is 
particularly useful in control applications where there are multiple possible manipulated variables, since the expert 
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systern(s) can specify which manipulated variable (or variables) is to be adjusted to achieve the end result change 
desired, and the supervisor system can then address simpler one-dimensional control problems. 

3) Preferably, at least some users can call on a build-supervisor procedure which permits them to define or redefine 
modules of the supervisor procedure by editing highly constrained templates. The templates use a standardized 

s data interface (as seen by the user), which facilitates the use in control actions of data from a wide variety of 

systems. The templates in the available template set preferably contains highly constrained portions (which are 
optimized for the most common functions), and pointers to functions which can be customized by the user 

4) Preferably, the build-supervisor user can also caff on a build-user program procedure, which allows fully cus- 
tomized control functions to be programmed by sophisticated users. The build-user program procedure can also 

10 be used to create customized message generation functions. These can be used to generate messages describing 

the actions of the supervisor, and also to call other sub-procedures, such as the expert procedures. 
5} Preferably at least some users are also permitted to call on a build-expert procedure which can be used to 
construct an expert system. Knowledge is specified by user input to a set of highly constrained, substantially natural 
language templates. The templates use a standardized data interface (as seen by the user), which facilitates the 

is use in the expert system of data from a wide variety of systems, The completed templates can then be compiled 

to produce a runnable expert system. Preferably, the user can also retrieve, examine, and modify the input from 
previously specified templates. Thus, an expert system can be modified by recalling the templates which specified 
the current expert system, modifying them, and recompiling to generate a new runnable expert, 
6) A historical process database advantageously standardizes the access to current and historical process data 

20 by the supervisor and expert procedures. This is particularly useful for collecting the results of laboratory charac- 

terizations over time of the underlying process. 

Control of Continuous Processes 

zs £0045] The goals in management of a substantially continuous process include the following: 

1) Maximizing quality: In the chemical process industry, it is important to reduce variation in measured properties 
of the product, and to control the average measured properties at specified aim values. 

2} Minimization of cost of manufacture: The process must be operated in a way that efficiently uses energy and 
30 feedstocks without compromising quality objectives. Upsets and inadvertent process shutdowns, which adversely 

affect quality and production rate, and reduce the total utility (fractional uptime) of the plant, are all costly and must 
be avoided. 



35 



Control of Multiple Manipulated Variables 



[0046] As noted above, in many process control applications, several manipulated variables must be jointly controlled 
in a single control loop (e.g. in some relation to a single measured variable). A special (and very common) case of this 
is seen in many situations where a single manipulated variable can normally be used, but alternate manipulated var- 
iables should be used instead if the first-choice manipulated variable becomes constrained. When human operators 
40 optimally handle problems of this kind, their choice of which output to change will often be made heuristically based 
on cost, quality response dynamics, and process stability 

[0047] One novel approach to this problem (which is used in several of the preferred embodiments below) is to 
decompose the multiple-variable problem into a set of single-variable problems. An expert procedure is used to decide 
which control parameter(s) to adjust, and one or more from a set of single-input single-output procedures are used to 
4S make the adjustment (s). Not only does this facilitate quality, cost, and plant operability objectives, but it results in control 
strategies which act properly over a much wider range of conditions. Correct actions are taken, where conventional 
control methods would make no action or wrong actions. This improves the usefulness of the control strategy to the 
operator, and leads to higher use of the controls, 

[0048] The various novel ideas described below are particularly advantageous in such multiple control parameter 
50 problems. In the presently preferred embodiment discussed below, a dimethyl terephthalate process (DMT) process 
is presented as an actual example to show the advantages achieved by the various novel ideasdisciosed in this context. 

Discrete Control Actions 

ss [0049] As mentioned above, control systems that continuously change manipulated parameters are very difficult to 
monitor. Since operators depend on the supervisor procedure to maintain important product properties and process 
operating conditions, it is important that they be able to understand and judge supervisor performance. By restricting 
supervisor changes to a reasonably small number of significant discrete actions, supervisor performance becomes 
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much more understandable. 

[0050] One novel teaching stated in the present application Is an integrated system for process control in which a 
process supervisor procedure (which is preferably the top level procedure) defines parameters for one or more control 
systems (or control procedures). The supervisor procedure changes control parameters only in discrete actions, and 
$ the thresholds for the decision to act are preferably made large enough (for each control parameter) that every action 
must be a significant change. 

[0051] A related novel teaching herein is that every control action taken by the supervisor should be reported out to 
plant personnel in a substantially natural language message. Preferably, instances where action would be desirable 
but is not possible (because of constraints or other unusual circumstances) should also be reported. Preferably, a 

10 cumulative record of the messages is kept, and is available for review by operators and plant support people. Preferably 
the message should report the time, amount, location, and reason for each action. Other relevant information, such 
as the time stamp of relevant sampled data, and the nature of statistical deviations from aim should preferably be 
included as well Since every action is significant and the number of actions is reduced, the cumulative record provides 
a meaningful record of supervisor performance. 

is [0052] This is particularly advantageous for systems where some ot the relevant time constants are so slow that 
dynamic process responses last several hours (or longer). A new operator coming on duty at a shift change can use 
the cumulative record to judge what effects to expect from supervisor actions on the previous shift. 
[0053] The use of a deadband in feedforward action is one novel means that is advantageously used to discretize 
supervisor actions. Feedforward action is taken only when the measured value changes by more than the deadband 

20 from its value at the last action. This generates a series of discrete changes in the manipulated variable, which can be 
effectively logged and evaluated by operators. 

[0054] Statistical filtering of discretely measured values also serves to reduce control actions to a few significant 
changes. Statistical tests, as is well known, distinguish normal variation around the average from significant deviations 
from the average. In most cases, a number of measurements will be needed to indicate a deviation. By only acting on 
£5 statistical deviations, relatively few, but significant, actions will result. 

Expert Systems for Process Control 

[0055] A general problem with expert systems is how the expert system software is to be integrated with process 
30 control software. Several expert systems which have been suggested for process control have used an expert system 
as the top-level supervisor procedure for the control system- However, several of the novel embodiments disclosed 
herein achieve substantial advantages by departing from this conventional structure. For one thing, if the expert system 
is the top level procedure, then it becomes more difficult to accommodate more than one expert in the system (or, to 
put this another way, the potential modularity of the expert system cannot be fully exploited). Thus, one significant 
35 advantage of several of the novel embodiments disclosed here is that use of more than one expert system within a 
single integrated system becomes much more advantageous. 

Types of Process Control Systems 

40 [0056] (t should also be noted that the use of an expert system to design a new process (or to debug a newly intro- 
duced process) has significantly different features from the problem of optimally controlling an existing process. While 
various ones of the novel ideas disclosed herein may have significant applications to such problems as well, the pres- 
ently preferred embodiment is especially directed to the problem of optimally controlling an existing operating process, 
and the various novel ideas disclosed herein have particular advantages in this context. 

45 [0057] A significant realization underlying several of the embodiments disclosed in the present application is that the 
structure of expert systems for process control applications can advantageously be significantly different from that of 
other expert system problems (such as consultative expert systems problems, in which a human is queried for infor- 
mation). The Hardy et ai. and Erman et at patents illustrate this difference. 

Consultative expert systems seek to substantiate one of a number of possible causes by interactively querying the 
so user about the symptoms. Such systems must use complex knowledge representations and inference methods to 
minimize the number of user queries by carefully selecting the information they solicit. Moreover, since the user is not 
an expert, the system should be able to explain why it is requesting information. 

[00S8] in contrast, the real-time process problem is much simpler. The information needed by the expert is typically 
in the form of process measurements, which can be rapidly retrieved from process control and data systems without 
55 human intervention. There is much less need to minimize the requests for information, in fact, it may be faster to retrieve 
all the data that could be relevant to the problem than to determine what data is relevant. Moreover, since the experts 
will run automatically, there is no need to explain the reasoning during the inference process. As long as the ruiebase 
is not too targe, the process control expert can operate effectively using a simple "forward chaining" (or data driven) 
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inference method. There is no need for the complex "backward chaining 11 procedures used in the consultative systems. 
Moreover, if a number of modular expert subprocedures are used within a single process, each expert tends to be 
smaller, and is more likely to work effectively in forward chaining mode. The presently preferred embodiment is espe- 
cially directed to process control and monitoring, and the novel ideas disclosed herein have particular advantages in 

5 this context. However, various ones of the novel ideas may have significant applications to other problems as well 
[0059] It is believed to be a significant idea to use expert system techniques to point to the direction of action in a 
multi-parameter control problem, as discussed above. One advantage is that the use of the expert permits more cases 
to be handled; for example, when one control parameter is up against its limits, the expert system can specify another 
parameter to be changed. The expert can also be especially advantageous in preventing a wrong action from being 

10 taken; in some types of processes it is conceivable that erroneous control strategies could potentially cause property 
damage or injuries, and the natural language inference rules of the expert {possibly combined wfth a more quantitative 
optimization scheme) can usefully ensure that this cannot happen. Thus, one advantage of various of the process 
control expert system embodiments disclosed in the present application is that they facilitate reliable implementation 
of a control strategy which (primarily) prevents a clearly wrong action from being taken, and (secondarily) permits 

is minimizing costs. In particular, it is especially advantageous to use a knowledge based structure where the rules are 
constrained to be of the three types described in the context of a process control application. The retrieval rules permit 
the predominantly quantitative sensor data (and other input data) to be translated into a format which is suitable for 
expert system application, and the control rules provide a translation back from expert system reasoning into an output 
which matches the constraints of the control problem. 

20 [0060] The present invention is particularly advantageous in controlling processes which are substantially continu- 
ous, as distinguished from job shop processes. That is, while some computer-integrated manufacturing systems focus 
primarily on issues of queuing, throughput, statistical sampling of workpiecesfor inspection, etc, substantially contin- 
uous processes (such as bulk chemical synthesis and/or refining processes) typically demand more attention to issues 
of controlling continuous flows. 

25 

Expert Systems Generally 

[0061] The present application contains many teachings which solve specific problems and offer corresponding ad- 
vantages in the sub-class of expert systems used for process control, or even the sub-sub-class of expert systems 
^0 used for control of substantially continuous processes. However, the present application also discloses many novel 
features which could be adopted into many other types of expert systems, and/or into many other types of control 
applications, while still retaining many (if not all) of the advantages obtained in the context of the presently contemplated 
best mode. . 

[0062] Similarly, while the present application describes numerous novel features which are particularly applicable 
as to rule-based forward-chaining expert systems, some of the ideas described herein are believed to be very broadly 
novel, and could be adapted for use with other types of expert systems too. 

Natural -Language Rule Statements 

40 [0063] One of the novel teachings in the present application provides an expert system tool in which knowledge is 
entered into the knowledge base through a limited set of pre-defined, highly constrained, natural-language knowledge 
structures which are presented as templates. In typical previous expert systems, knowledge is coded in the strict 
syntactical format of a rule or computer language, which allows great flexibility in knowledge representation. The person 
entering the knowledge (hereafter referred to as the developer) must learn the syntax, must choose an appropriate 

45 knowledge representations, and must formulate syntactically correct input. 

[0064] In contrast, by restricting the developer to constrained, pre-defined structures, the need to leam rule or lan- 
guage syntax and structure is eliminated. Moreover, if the number of such pre-defined knowledge structures is small 
enough, the total knowledge representation in the expert system can be easily understood. Thus, a knowledge engineer 
is not needed. The domain expert can enter the knowledge to build an expert system directly. The developer's input 

bo can then be translated automatically into an operational expert system. The developer need not be concerned with or 
aware of the specific language or system used to implement the expert. 

[0065] Another novel teaching is that the knowledge entered into the pre-defined natural-language structures is 
stored in substantially natural -language form. This permits the knowledge to be revised at any time in the form in which 
it was originally entered: the developer simply recalls the stored template information, modifies it, and stores the mod- 
55 ifsed knowledge. This is also simple enough to be done by the domain expert. The modified knowledge can then be 
automatically translated into a modified operational expert. 

[0066] Another significant advantage of several of the disclosed novel embodiments for creating an expert system 
is that the expert can be significantly more compact and faster in execution. This is achieved by integrating the expert 
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system's rules with the code which performs the inference function. This allows many independent runnable expert 
systems to be created. Moreover, the ease and simplicity of knowledge updating can still be preserved by maintaining 
the natural language form of the knowledge. The knowledge base can easily be reviewed and modified without hin- 
drance from the specific inference method used in the runnable system. 

5 [0067] Another novel feature of several of the disclosed embodiments is the use of a standardized data interface (as 
seen by the user) in the knowledge templates, which facilitates the use in the knowledge base of data from a wide 
variety of systems. Expert systems are allowed to require data from process or laboratory measurements (both current 
and historical), or data collected from other sources (such as on-line analyzers), or data and parameters from the 
process control systems, A standard interface to all such data sources facilitates use of the data in expert systems, 

10 since domain experts usually lack the programming expertise that would otherwise be needed to access these data 
sources. 

Expert System Rule Types 

1$ [0068] As mentioned above, previous expert systems tools normally use a rule or computer language which allows 
great flexibility h knowledge representation, One novel teaching in the present application is the restriction of the 
knowledge structure within an expert system to rules of three highly constrained types. The three rule types are: 1) 
: retrieval rules, which each assign one of several descriptors to a name in accordance with the values of numeric inputs; 
2) analysis rules, which each can assign a descriptor to a name in accordance with the descriptor/name assignments 

bo made by other rules; and 3) action rules, which either execute or don't execute a command in accordance with the 
descriptor/name assignments made by other rules. 

[0069] Preferably only the retrieval rules include numeric operations. Preferably only !he action rules can enable 
execution of an external command (i.e. of a command which does not merely affect the operation of the expert proce- 
dure). Preferably each of the action rules requires only a logical test for the assignment of a descriptor to a name. 

26 Preferably none of the action rules can assign a descriptor to a name. 

[0070] While this organization of an expert system's structure is especially advantageous in the context of a process 
control expert system, it can also be applied to other types of expert systems. In a process control system, the relevant 
inputs will normally be process data, laboratory data, or control system parameters. The relevant outputs will normally 
be executable procedures which affect the operation of control or supervisor systems, or communicate with operators 

30 or domain experts. This teaching could also be applied to expert systems generally, in which other input and output 
functions are more important. 

[0071] For example, in consultative use, retrieval ruies need not be confined to numeric inputs, but could accept the 
natural language descriptor/name assignments as input from the user. To better control the requests for Input, such 
consultative retrieval rules could advantageously execute contingent upon a test for the previous assignment of a 
35 descriptor to a name. 

[0072] In general, this structuring of the inference rules provides for a more understandable expert. The retrieval 
rules provide access to process and control system data ; and translate from quantitative input data into a natural 
language form. The emulation of natural-language reasoning is concentrated as much as possible in the analysis rules, 
which capture knowledge in a form which might be used to communicate between domain experts. The action rules 
to translate from the natural language inference process back to output procedures which are meaningful in the computer 
and control system being used. 

Modular Organization 

45 [0073] The organization preferably used lor process control has substantial advantages. The top level procedure is 
a modular process supervisory controller. The supervisor modules allow flexible specification of timing and coordination 
with other modules. Modules carry out commonly used control functions, using data specified through a standard data 
interface, as well as calling user customized functions. User customized functions might generate messages, perform 
unusual control actions, or call expert system procedures. Using the build-supervisor procedure, users can define or 

50 redefine modules by editing highly constrained templates which include a standard data interface specification. The 
standardized data interface (as seen by the' user) facilitates communications with an extremely wide variety of systems. 
Dynamic revision is achieved by storing the user input to the constrained templates as data in a storage area accessible 
to both the supervisor and build-supervisor procedures. The running supervisor examines the stored data to determine 
which functions have been specified for that module, and what data sources have been specified through the standard 
data interface. The supervisor then calls an appropriate modular function and passes the user-specified data. 
[0074] This organization is especially advantageous in providing parallelism and branching in control strategies. That 
is, the modular organization of the presently preferred embodiment permits at least the following capabilities: 
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a) control strategies for more than one independent control application can be defined and updated; 

b) control strategies for more than one lower level process control system can be defined and updated; 

c) alternative control strategies can be defined and stored, so that an expert system (or other software or user 
command) can switch or select between control strategies merely by selecting or "de-selecting" modules; 

s d) timing and coordination of module functions is facilitated; 

e) multiple independent expert system procedures can be utilized within a single supervisor; 

f) more than one user can define control strategies by accessing different modules, simultaneously if desired. 

[0075] Another novel teaching herein is that each supervisor module (or, less preferably, less than all of the module 
io types) should preferably contain a pointer to optional user-customized functions. These functions can be used to gen- 
erate informative messages about module actions, or a sophisticated user can implement unusual or non-standard 
control functions, or other customization utilities {such as the build-expert procedure in the presently preferred embod- 
iment) can be used to generate functions accessed in this manner 

[0076] This structure is "modular" in the sense that users can call up and modify the various blocks separately; but, 
is as will be discussed beiow, the command procedures which perform the standardized block functions are not neces- 
sarily separate within the source code. That is, modularity is advantageously achieved by storing the template-con- 
strained user inputs to each block as data; when the user wishes to modify the block, the data is translated back into 
corresponding fields in the template. 

[0077] Preferably, one of the modular functions in the supervisor is statistical filtering. This is particularly useful in 
so that statistical filtering can be introduced wherever it is advantageous, without requiring extensive custom programming 
by the users. As described above, statistical filtering is advantageous both for avoiding overreaction to insignificant 
changes, and also for aiding the understanding by piant operators by reducing the number of actions. 
[0078] One of the novel teachings contained in the present application is that the use of statistical filtering helps to 
minimize the number of control parameter adjustments performed by the expert system, which in turn is very advan- 
2S tageous (as discussed below) in providing an understandable log of control actions taken. 

Sequencing Modular Blocks 

[0079] One novel teaching herein is a system for process control having a modular supervisor procedure which 
$0 includes novel module timing and sequencing methods. Users can preferably specify modules by editing highly con- 
strained templates, which include several specifiers for methods to be used in controlling and coordinating module 
execution. Preferably the module timing options include: 1 ) execute module function at fixed time intervals; 2) execute 
module function when new data becomes available for a specified data source; 3} execute module function whenever 
another module executes; 4) execute module function only on programmatic request; and combinations of these. Pref- 
35 erably a standardized data interface is used to specify the data source for the second of these options. 

Integration of Expert Procedures 

[0080] The integration of expert systems into process control has been a challenging problem. Most previous at- 
40 tempts to use expert systems in process control have used LISP based expert systems running on a dedicated machine, 
often a symbolic processing machine. Usually only one expert system with a single large knowledge base is created 
for a process. Since the knowledge base could contain many rules, a complex knowledge representation and inference 
process are needed to make inferences fast enough for reai-time use. The expert system typically runs independently, 
scheduling its own activities, and thus is effectively the "top level" procedure. Using a top level expert makes it more 
45 difficult to accommodate more than one expert system. (Another way to regard this area of advantage is to note that, 
without the teachings contained in the present application, the potential modularity of the expert system cannot be fully 
exploited.) 

[0081] Several of the novel embodiments described herein achieve substantial advantages by using more than one 
expert system subprocedure within a single integrated system. Since expert decisions wilt normally focus on a specific 
bo task or area, the modularity of the problems can be exploited in the structure of the expert system. Also, if the experts 
run under control of the supervisor, it is much easier to coordinate the decisions of the expert systems with the control 
actions of the supervisor. Since many important uses of expert systems will affect control actions, this is an important 
factor. 

[0082] Another advantage of a modular structure, where expert systems are included as independent procedures 
ss called by the supervisor, is that the overall process control system is more reliable. A badly or incompletely functioning 
expert system within an overall supervisor system will affect only the functions it specifically interacts with. However, 
the failure of a top level expert system, which controls timing and execution of control functions, could disable all 
supervisor functions. The modular structure also has significant advantages in maintenance and debugging. 
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[0083] Thus, the organization preferably used for process control has substantial advantages. The top level proce- 
dure Is a cycling procedure which functions as a process control supervisor, The supervisor process can call on one 
or more expert system procedures, and the user can calf on a build-expert procedure which can reconfigure one of 
the expert systems already present, or create a new expert system. The supervisor procedure can preferably also call 
s on a historical data base. 

[0084] The moduJar organization described is especially advantageous, as discussed above, in providing parallelism 
and branching in control strategies, This Is especially advantageous in process control situations, since the appropriate 
strategies for different circumstances can be fuHy pre-defined by the user, and he can rapidly switch between pre- 
defined strategies as the need arises. 

10 

Historical Process Database 

[0085] The use of a historical database of process data in combination with a process supervisor procedure and/or 
expert system procedure is particularly advantageous. In the presently preferred embodiment, a historical database 

15 is used which can provide a time-stamp with each piece of output data, to clearly indicate provenance, and can retrieve 
the stored data (for a given parameter) which bears the time-stamp closest to a given time. The historical database 
' can preferably maintain a record of continuously measured process data (such as temperature, pressure, flow rate), 
as well as discretely sampled, time-delayed measurements, such as laboratory measurements. The database greatly 
facilitates the use of laboratory (or other sampled type) measurements. Because of the time delay in making laboratory 

20 measurements, the value of the measurement when it becomes available in the database will correspond to the con- 
tinuously measured data for the instant at which the measurement sample was actually taken, which might be several 
hours in the past. The historical database allows time delayed measurements and their corresponding continuous 
measurements to be used together. This is advantageous for balancing component material flows in the process. In 
the presently preferred embodiment, the historical process database may be thought of as providing a way to "buffer 11 

2£ time-stamped data and provide a standardized data interface, but it also permits other functions to be served. 

[0086] The historical database also advantageously provides a basis for statistical tests. Some statistical tests will 
require a number of past measurements, which can be retrieved from the database. The database also advantageously 
allows the calculation of time average values of measurements. This can be useful in dampening noisy signals for use 
in a control action, In general, the database advantageously serves to buffer data input from a number of sources, 

30 standardizing access from the supervisor and expert procedures, 

[0087] One of the novel teachings in the present application Is an integrated system for process control in which a 
process supervisor procedure (which Is preferably the top-level procedure) is configured as a modular software struc- 
ture, with modules which can be revised by a user at any time, without: significantly interrupting the operation of the 
process supervisor. The supervisor can define control parameters for many process control procedures, and can re- 

35 trieve data from many sources (preferably including a historical database of process data, which can provide time- 
stamped data). The supervisor can also call on various expert subprocedures. Preferably the expert subprocedures 
can also be modified by an authorized user at anytime, by calling up and editing a set of natural-language rule templates 
which correspond to the rules being executed by the expert subprocedure. 

[0088] One of the novel teachings in the present application is an integrated system for process control in which the 
40 user can customize the process supervisor procedure with reference to a standardized data interface. The data values 
to be used by the supervisor are specified in the standard interface by two Identifiers. The first identifies which (software) 
system and type of value is desired. The value of a setpoint in a particular distributed control system, the value of a 
sensor measurement in a particular process monitoring system, the value of a constraint from a process control or 
supervisor system, and time averages of sensor measurements from a particular historical database are examples of 
45 this. The second identifier specifies which one ot that type of value is desired, for example the loop number in the 
distributed control system, 

[0089] Data values specified through the standard interface may be used as measured values, manipulated values, 
or as switch status values indicating an on/off status. Preferably the interface allows the user to specify data in any of 
the relevant process control and data collection systems used for the process, or for related processes. Preferably 
the interface also allows specification of data (both current and historical) in a historical process database. Since 
multiple control systems (or even multiple historical databases) may be relevant to the process, the standard interlace 
greatly facilitates the use of relevant data from a wide variety of sources. 

BRIEF DESCRIPTION OF THE DRAWING . 

65 

[0090] The present invention will be described with reference to the accompanying drawings, wherein: 

[0091] Figure 1 schematically shows the structure of hardware and procedures preferably used to embody the novel 

process control system with expert system capabilities provided by various of the innovative features contained in the 
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present application. 

[0092] Figure 2 is a schematic representation of the flow of information in the expert system structure preferably used. 
[0093] Figure 3 shows the template used for a retrieval rule in the presently referred embodiment, together with a 
sample of a retrieval rule which has been entered into the template. 

[0094] Figure 4 shows an example of a different kind of retrieval rule, known as a calculation ruie. 
[0095] Figure 5 shows an example of an analysis rule 220, 

[0096] Figure 6 shows the presently preferred embodiment of the template tor action rules, and an example of one 
action rule which has been stated in this format. 

[0097] Figure 7 shows an example of a chemical synthesis processing layout in which the method taught by the 
present invention has been successfully demonstrated. Figure 8 schematically shows the structure preferably used 
for the supervisor procedure 1 30 and the build-supervisor procedure 810, 

[0098] Figure 9 shows a menu which, in the presently preferred embodiment, is presented to the user by the build- 
supervisor procedure 810 to select a template to provide user inputs to define or modify a block within the supervisor 
procedure, 

[0099] Figures 10-13 show specific templates which, in the presently preferred embodiment are presented to the 
user by the build-supervisor procedure to provide input to define or modify a feedback, feedforward, statistical filtering, 
or program block, respectively. 

[0100] Figure 14 shows a block-editing utility menu presented to the user, in the presently preferred embodiment, 
by the build-supervisor procedure. 

[01 01] Figure 1 5 shows a flow chart for the base cycle procedure used in the supervisor procedure in the presently 
preferred embodiment. 

[0102] Figure 16 shows a menu which, in the presently preferred embodiment, is the top-level menu presented to 
the user by the build-supervisor procedure, and Figure 17 shows a menu which is the top-level menu within the build- 
expert procedure. 

£01 03] Figure 1 8 is another schematic representation of the interrelations among the various procedures which permit 
user customization of functionality. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 
General Organization of Hardware and Procedures 

[01 04] Figure 1 schematically shows the structure of hardware and procedures preferably used to embody the novel 
process control system (with expert system capabilities) provided by various of the novel features described in the 
present application. An underlying process (for example a chemical process) is very schematically represented as a 
single pipe 160, on which sensors 156 and one actuator 158are explicitly shown. Of course, real world examples are 
substantially more complex; Figure 7 shows the chemical process flow of a sample system in which the presently 
preferred embodiment has been successfully demonstrated. The various actuators 158 are controlled, in accordance 
with feedback signals received from various sensors 156, by one or more controllers 154, 

[0105] In the presently preferred embodiment, the controller 154 is configured as a pneumatic proportional, integral, 
derivative (RID) controller. However, a wide variety ot other controller technologies and configurations could be used. 
Pneumatic controllers are used in this example because they are common in the chemical process industry, and match 
well with the feedback requirements of chemical process control. Alternatively, an ail-electronic distributed control 
system could be used instead. Moreover, the controller functionality could be different, ejj, a proportional/integral 
controller or a proportional controller could be used instead. In the presently preferred embodiment, the PID controller 
154 is directly controlled by a computer control system 152. {This system 152 is referred to, in the various examples 
of user menus shown, as W PG3" (process control system.) The computer controller system 1 52 and the PID controller 
154 may be regarded together as a single first level controller 150, and could easily be configured in that fashion (as 
with a distributed digital control system) to implement the present invention. 

[0106] The control system 150 receives at least some of its parameters 132 (e.g. setpoints or feedforward ratios) 
from a supervisor procedure 130, which is preferably a higher level of control software. (In many of the sample user 
menus and forms shown, the supervisor procedure 1 30 is referred to briefly as "ACS/} The supervisor not only receives 
inputs 157 indirectly (or directly) from various sensors 156, it also receives lab measurement data 162, and also can 
issue calls to and receive inputs from the expert system 120, as will be described below. 

[0107] Inthe presently preferred embodiment, the supervisor and build-supervisor procedures run on a minicomputer 
(e. fl. a VAX 11/785), whiie the computer control system 152 is a PDP-11 . 

[0108] The supervisor 130 is preferably also connected to a historical process data base 140, which directly or indi- 
rectly receives the inputs from the sensors 157 and the off-line lab measurements 162. Thus, when the supervisor 
needs to access a value 157 or 162, it is not necessary for it to call on a physical device or read a real-time signal. It 
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can simply can a stored value (together with a time stamp} from the database 1 40. However, many of the advantages 
of the present Invention could also be obtained without using the historical process data base 140. 
[0109] In addition, the supervisor 130 preferably also embodies a statistical control system. Statistical control sys- 
tems, as are well known in the art of chemical processes, are advantageous when the process characteristics and 
$ measurement characteristics are subject to significant random variation, as they normally are In the chemical process 
industry. Statistical filtering tests are preferably performed to filter out statistically normal variation, and ascertain wheth- 
er a process has significantly deviated from its current goal or average. (Alternatively, the statistical filtering functions 
could be performed elsewhere in software, e^> in the database software.) 

[0110] The supervisor procedure 1 30 is preferably run as a cycling process, and can call multiple expert systems 
10 120 when indicated. (In many of the sample user menus and forms shown, the expert and build-expert procedures are 
referred to briefly as "PACE.") 

[01 11] A sample realistic process context (in which numerous novel features have been successfully demonstrated) 
will first be described. The operation of the historical process database will next be described, since that provides a 
standardized data interface to which many of the other functions connect. Next, the functioning of the build-supervisor 
is procedure will be described in detail, since that provides many details of how the supervisor is configured in the presently 
preferred embodiment, and after that the organization of the supervisor procedure itself will be discussed in greater 
detail, in later sections, the structure of the expert systems preferably used will be described in detail, and the operation 
of the build-expert procedure which constructs the expert systems will also be described in detail. 

2° Sample Process Context 

[0112] Figure 7 schematically shows a sample embodiment of a chemical process incorporating several novel fea- 
tures described in the present application. The system shown is one in which various novel aspects set forth in the 
present application have been advantageously demonstrated. 

25 [0113] It should be understood that the present invention provides a tool of very broad applicability, which can be 
used in many processes very different from that of Figure 7. Thus, for example, various of the claims herein may refer 
to sensors which sense "conditions" in a process, or to actuators which change "conditions" in a process, without 
reference to whether one sensor or many sensors is used, whether one or several parameters is sensed by respective 
ones of the sensors, whether the actuators are valves, motors, or other kinds of devices, etc. 

$o [011 4] Figure 7 shows part of the distillation train of a process in which paraxylene is air oxidized to make terephthallic 
acid, which is then esterified with methanol and refined to dimethyl terephthailate (DMT). DMT is sold as a bulk product, 
and commonly used as a polyester precursor. The esterification process will produce a significant traction of the impurity 
methyl formyl benzoate {MFB). One of the key objectives in a DMT synthesis process is controlling the compositional 
fraction of MFB, since it affects the properties of products made from DMT The refining train shown in Figure 7 will 

35 reduce the average MFB fraction to a fairly constant level which is (in this example) about 22 ppm (by weight). 

[011 5] The crude feed 702 will typically have a composition which is (by weight) about 74% DMT, about 20% orthox- 
ylene (and related components which tend to recycle with the orthoxylene), about 5% methyl hydrogen terephthailate 
(MHT), and about 0.2% of methyl formyl benzoate (MFB), The MFB-depieted product 740 is preferably further refined 
to reduce the MHT fraction. 

*o [0116] The crude feed 702 is fed into approximately the middle of a first distillation column 710. The column 710 is 
heated at its base by a steam reboiier 712, The steam flow is controlled by a flow controller 714 (which is connected 
to an actuator 716 and a sensor 718.) Similarly, the feed flow controller 704 is connected to an actuator 706, and a 
sensor 708. The column 710, as operated in the presently preferred embodiment, has internal pressures and temper- 
atures which range from about 230 Torr at about 230° C at its bottom to about 55 Torr at about 70 d C at its top. The 

45 vapor stream 720 is passed through a condenser 722, and some of the resulting condensate is fed back into the column 
as reflux 724. The product stream 726 has a mass flow rate of about 20% of the crude feed 702, and is recycled. A 
bottom product 72S is fed to the top of a second distillation column 730. The second distillation column has a steam 
reboiier 732 near its bottom (controlled by a steam flow controller 734, actuator 736, and sensor 738). The pressures 
and temperatures in the second column 730 (which in the user screens of the presently preferred embodiment is 

so frequently referred to as the "MFB column") range from about 240° C at about 235 Torr at the bottom of the column to 
about 70 Torr and about 1 90° C at the top of the column. The bottom product 740 of the column 730 (which has a mass 
flow of about 0.B of the crude feed 702) is the MFB-purified product. (In this product the fraction of MFB will on average 
have been reducedto about 22 ppm, for the conditions given.) The top product 742 of the column 730 is passed through 
a condenser 744 and re introduced into column 710 as a bottom feed. (Column 710 is referred to, in the specific example 

ss given below, as the "xylene column*.) The mass flow in the loop 728/742 is quite large; typically the mass flow of flow 
728 will be about three times the mass flow of the crude feed 702. 

[0117] In addition, a third distillation column : in the presently preferred embodiment, Is operated in parallel with a 
middle section of column 710, This third column 750 is fed a side draw stream 752 from the first column 710. The vapor 
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stream 754 of column 750 is passed through a condenser, and part of the condensate is reintroduced to column 750 
as a reflux 758. Most of the remaining condensate is reintroduced to first column 71 0 as an upper middle feed. Similarly, 
the liquid stream 762 of third column 750 is partly reintroduced as a bottom feed after being vaporized in the reboiier 
764, but is also partly fed back into column 71 0 as a lower middle feed 766. The additional separation provided by the 

£ third column 750 enhances the net compositional segregation of MFB. The middle product 768 of the third column 750 
is a low-flowrate product flow (typically 0.003 times the mass flow of the crude leed 702), and this product flow removes 
most of the undesired MFB impurity from the system. The temperatures and pressures in the third column 750 range 
from (in this example) about 230° G at about 260 Torr at the bottom of the column to about 60 Torr at about 125° C at 
the top of the column. Stream 761 is a small purge stream removing intermediate materials. 

10 [01 18] In the sample embodiment, the three primary control points for control of MFB composition are the steam 
feed to the MFB column reboiier 730, which is controlled by flow controller 734; the steam feed to the xylene column 
reboiier 710, which is controlled by flow controller 714; and the feed of crude feed stock to the xylene column 710, 
which is controlled by flow controller 704. Numerous other controllers, pumps, and other process equipment maintain 
the temperatures, pressures, and flow rates at other points in the process. In accordance with principles well known 

is in the art of chemical engineering, this serves to maintain mass and energy balances and compositional trends con- 
sistent with the ultimate control objective, which is to maintain a high and constant purity in the product stream 740. 

Historical Process Database 

20 [0119] In the presently preferred embodiment (as shown in Figure 1), the supervisor 130 receives data primarily 
through a historical process data base 140, which directly or indirectly receives the inputs from sensors 157 and off- 
line laboratory measurements 1 62. Thus, when the supervisor needs to access a value 1 57 or 1 62, it is not necessary 
for it to call on a physical device or read a realtime signal, since it can simply call a stored value (together with a time 
stamp) from the database 140. 

2& [0120] In the preferred embodiment, every data value provided by the historical database has a tlmestamp attached. 
Data are received in at least two ways: first, some parameters are received as nearly continuous data flows (more 
precisely, as high-sampling-rate time series). For example, the data 157 from sensors 156 (eg. temperature sensors) 
will be received as a series of digital values from analog-to-digital converters 155. In the presently preferred embodi- 
ment, compression algorithms are used to reduce the storage requirements of this data : and permit a usefully long 

30 period of time tobe represented without requiring impractical amounts of storage space. However, this operation (which 
includes both compression and decompression algorithms) is essentially invisible to the supervisor procedure 130. 
[0121] Secondly, lab analysis data 162 can also be stored in the historical database 140. For example, compositional 
measurements must normally be done off-line. A physical sample will be pulled from the physical process flow and 
sent to the laboratory for analysis. The resulting lab analysis value is entered into the historical database, timestamped 

3S with the time the sample was taken, 

[0122] A third source of data is simulations 143: running processes can be simulated, using any of a variety of 
currently available simulation methods, and predicted conditions can be stored in the historical database (together with 
the proper timestarnp). Thus, for example, control strategies can access data generated by complex real-time simu- 
lations. 

40 [0123] Thus, many of the advantages of the database 140 derive from the fact that it can provide a timestarnp to 
accompany every piece of data it provides. In addition, in the presently preferred embodiment, the database also stores 
the name and units for each parameter. As presently practiced, the database is also able to perform a variety of other 
functions, including monitoring, activating alarms if certain sensed measurements reach certain critical levels, output 
processing (i.e. loading data out to physical devices), generating plots of selected parameters over time, as well as 

4& other common database functions (e.g. generating reports), 

[0124] This structure is quite flexible: for example, in alternative embodiments, one supervisor procedure could in- 
terface to multiple databases 1 40, and/or one database 1 40 could receive calls from more than one supervisor proce- 
dure 130 (which optionally could be running on different systems). 

50 Supervisor and Buijd-S u pe rvisor Procedures 

[0125] The present application describes some very advantageous features of novelty in the supervisor procedure 
130 and build-supervisor procedure 810, which could optionally and less preferably be incorporated in embodiments 
which did not include at least some of the features described in the context of the expert and build-expert systems 110 
ss and 120. 

[01 26] The supervisor procedure 1 30 preferably used contains a modular software structure which greatly facilitates 
initial setup and also modification. Preferably the supervisor procedure 130 is a cycling procedure constructed as a 
set of blocks. That is, each block defines a core procedure which (as seen by the user, both initially and whenever 
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called up for modification) js substantially self-contained, and which (in the presently preferred embodiment) is of one 
of four types. Preferably each block Is either a feedforward block, a feedback block, a statistical filter block, or a program 
block. (That is, preferably each block is configured by user inputs to a template for one of these block types,) Preferably 
each kind of block aiso has the capability to call a user subroutine, and in fact the "program blocks" used in the presently 

5 preferred embodiment perform no other function. 

[01 27] The functional templates and data interface definitions for the most commonly used functions are pre-defined, 
but the user can also add code of his own if he wishes to do so. Providing standardized templates for the most commonly 
used functions expedites initial functional definition, and also facilitates maintenance, but sophisticated users are not 
prevented from writing their own customized functions (such as messaging), 

10 [01 28] Feedback blocks are used when a manipulated parameter must be adjusted to keep a measured parameter 
near a desired goal. Feedforward blocks are used when two parameters (which are not necessarily in a causal relation) 
are linked, U2, when a manipulated parameter must be adjusted to keep it In some ratio (or other relation) to a measured 
parameter. Statistical filtering blocks are used, in the presently preferred embodiment, to provide the advantages of 
statistical process control, and to facilitate minimizing the number of control parameter adjustment actions. 

is [0129] Preferably a maximum number of blocks is predefined. (In the presently preferred embodiment, 200 blocks 
is the preset maximum, and this number is large enough to serve the control needs of several different systems simul- 
taneously.) The imposition of a maximum helps to maintain the software, by limiting the number of functions which can 
be crowded into any one software structure, and by motivating users to delete obsolete block definitions. 
[01 30] Thus, a software structure like that described can be used to control several systems and/or used by several 

20 users. The provision of "ownership" identification for each block, whbh may optionally be combined with access priv- 
ilege restrictions, advantageously he^ps to preserve maintainability in multi-user environments. 
[0131] Figure 8 shows the preferred organization of the supervisor procedure 130. The top level loop (shown as a 
base cycle controller procedure 802), which calls the various blocks 851, 852, 853, sequentially, is preferably a 
cycling procedure. For example, the dormant time waiting block 891 might be set, in the dimethyl terephthalate synthesis 

2£ application described, so that the base cycle procedure 802 is executed every 15 minutes (and therefore the entire 
sequence of blocks 851 etc. is called for possible execution every 15 minutes). The base cycle procedure also preferably 
performs some overhead functions. For example, the base cycle procedure 802 optionally contains the appropriate 
commands for branching on Interrupts 804, and for initialization after a start command 806. Secondly, the base cycle 
procedure 802, upon calling each block, will preferably look at the header of the block (which is stored as data in shared 

30 memory, as discussed below), and usually also at some external information, such as the system clock value or the 
time stamp of a variable, to see if thai block is due to execute. In the presently preferred embodiment, each block will 
also have status flags which indicate whether it may be executed, and will also have timing options which can be used 
to the user to specify, for example, that a particular block is to be executed only every 175 minutes. 
[0132] The base cycle procedure 802 is not the only procedure which is relatively "high-level" with respect to the 
blocks 851 , 852, etc. The build-supervisor procedure 810 is able to present the user with templates 812, and to (ef- 
fectively) change the operation of the blocks 851, 852, etc., by changing shared memory values in accordance with 
the user's inputs to the templates 812. 

[0133] That Is, the real time control actions of the supervisor procedure blocks are supervised by the base cycle 
procedure 802. The base cycle procedure is responsible for determining when blocks are on/off, when blocks should 

40 be initialized, and when blocks should be executed. It also controls the timing of the base scan through all blocks. 

[0134] In the presently preferred embodiment, each time the base cycle procedure executes a block, it checks the 
block type label (in shared memory) and calls the appropriate subroutine. That is, a single block of executable code is 
used for all of the feedback blocks, and similarly another block of code is used for all the feedforward blocks, etc., so 
that all 200 blocks require only four subroutines for their standard functions. Each time the base cycle routine executes 

45 a feedback block, it calls up the user-defined parameter set for that particular block, and passes those parameters to 
the subroutine which performs feedback functions in accordance with those parameters. 

Ba^QYgje Procedure 

so [0135] Figure 15 shows a flow chart of the logic preferably used in the base cycle procedure 802. The sequence of 
actions used in the main control program, when it is first started (e.g. by submitting it to a job queue) is: 

Check to see if more than 30 minutes has passed since the last control cycle in the supervisor procedure, If so, 
initialize all blocks whose status is "On", "Active", or "Just turned on \ (Initialization sequence is given below). (This 
action is shown as 1 502 in the flow chart of Figure 1 5.) 

[0136] Start the control cycle loop; (This loop is shown in 1510 in the flowchart of Figure 15,) 
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Set the system status to "Running-Computing 11 . 

Compute the next cycle time by adding the base scan interval to the current time. 

[01 37} Start a loop through all blocks, starting with block number 1 and counting up to the maximum number of blocks 
£ (This loop is shown as 1 520 in the flow chart of Figure 15): 

Check block status; 

* Get the switch status of the block. If the block is switching with an external switch parameter, get its status. 
10 (The switch status will be "On" ff the external switch is on, or "Oft" if the external switch is off.) If the loop is 

switched manually, the switch status is the same as the block's current status. 

* If the switch status is "On", "Active*, "Toggled On", or "Just turned on w , the block is on. 

* If the block is on, and the current block status is not "On" or "Just turned on", then the block is just being turned 
on. Set the Block Status to "Just turned on". 

15 * If the block is on, and the current block status is "On" or Must turned on", then the block is continuing to be 

on. Set the Block Status to "On", 

* If the block is not on, it is off. Set the block status to "Off \ 

If the block status is "Off", "Inactive", or "Failed", loop back up and start the next block. 
50 - [f the block status is "Just turned on 1 ', INITIALIZE the block (These steps are shown as 1524 in the flow chart of 
Figure 15): 

* If the block has a measured variable, set the "Last measured time" equal to the current time of the measured 
variable. 

25 * if the block has a Key block, set the "Key block time" equal to the "Last execution time 11 of the key block. 

* Set the "Last execution time" of the block to the current time, 

* If the block is a feedforward block, set the "Old measured value" equal to the current value of the measured 
variable. 

30 - if the block has a measured variable, get its current time. 
If the block has a key block, get Its last execution time. 

If the block timing option includes fixed Interval, and if the elapsed time since the "last execution time" of the block 
is greater than or equal to the execution time interval, set the execute flag for the block. 

If the block timing option includes keying off the measured variable, and if thecurrent time of the measured variable 
35 is more recent than the "last measured time" of the block, set the "last measured time" for the block equal to the 

current time of the measured variable, and set the execute flag for the block. 

If the block timing option includes keying off another block, and if the last execution time of the key block is more 
recent than the "key block time' 1 , set the "key block time* equal to the last execution time of the key block, and set 
the execute flag for the block. 

40 - if the execute flag for the block is set, set the last execution time for the block equal to the current time, and execute 
the block Only execute the biock once, even if more than one timing option was satisfied. (The block execution 
procedures are discussed in greater detail be!ow } and are shown generally as 1 530 in the flow chart of Figure 1 5. ) 
If more blocks need to be processed, loop back to the next block. 

45 [0138] This is the end of the loop 1520 through all the blocks. 

Set the system status to "Running-Sleeping", 

Set a wake up timer for the next cycle time computed above, and go to sleep until the timer expires, or until 
awakened by a request to terminated the program. 
so „ Wake up. Check to see rf interrupted to terminate, if so, set the system status to "Terminated normally", and stop 
completely 

If not terminated, branch back to the start of the control cycle loop 1510. 
Sample Source Code 

as 

[0109] The source code for the procedure which actually performs this function, in the presently preferred embodi- 
ment, is as follows. Due to the formatting requirements of patent applications, some portions of this and other portions 
of source code provided herein contain statements which are wrapped across more than one line (and hence would 
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need to be restored to single-line format, or appropriate leaders inserted, before being loaded lor execution); but those 
skilled in the art will readily recognize these instances, and can readily correct them to produce formally perfect code. 
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8ai« control progras* for tha Advanced Control 
Syattan, 

a Nigh I a vet optimisation and control syataa 
running on tha Yax, using Vantaga facilities* 



Pro^rara Control 
Include * ACSS i nc L uda&: S I oett^paraaaatsira . inc/nol tat 9 
Include 1 AC$Sinclud**rVsn_funet iona. inc/nollat 1 
1 nc I ud© * ACSd I nc I Ud« a : 5 y s_f unc t 5 ons * 1 nc/ nol fat ' 
I nc I Ltd a * ACS& i nc I udas r&an i p_para»a . f nc * 
I nc lud* 1 A CSS i nc I udes tMaaa^parawa . 1 nc * 
Include ' ACS5includes:?Ut9r w parsB&ft. inc» 
lncluda * ACS* i nc ludasiACSsarv. i nc • 
I nc luda * AC5S i nc I udoa : ACS* tat us . i nc 1 

I nt agar* 4 Slock 

lnt*gar*4 IntftserJJou 

Character*20 CKaract*r_now 

Intager*4 lis&uf(2) 

I nt ag*r*4 K*a»urad_t int^atamp 

lntag*r*4 Kay^block^fcxac^tiwa 

Logicat*2 Executajslock 

Logical Success 

Logical Hrst 

Character* 16 Dabug^tiwa 

Logical Forca_Jni tializat ion 

Paraesatar < F©rc»_i ni X i«U «at f on * .Trua,) 

Logical Dont_f orce_ini tial ization 

Parmttr iDom_f orct_J nix tat i za* i on * .?ala*. 

I nt»gar*2 &&as_type 

I nt eger*2 Maas_var 

Intag»r*2 f i tt_typa 

int agar*2 FU t_var 

I nt ag*r«4 Evant^f I agitata 

lfttegsr*4 T«m»r_f lafl 

tnt*g*r*4 Interrupt^ lag 

Charact«r*9 Clu*t*r_nana 

Paraaatar ( Ctust*r w n»ma * 'ACS^fLAfiS 1 > 

1 nt agar *4 f I ag jftask 

Logical Intarrupt^f lag_*«t 

Mtarrupt^f Lag^aatO * 9t«t t<£v«fu_f lag_state, f ) 
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Inter rupt_f leg * 55 
First * -True, 
Ftagjoask ■ 0 

Ftagjsatk » Ibaet C FUgjaaak , 0 ) 
FLag_sw>*k « Ibset { Flag^ttask , 1 ) 

C 

C,..tecord control program startup i n t^e log file 
C 

Vsn^stetus • vs**_fro«j&acU_ti*» C • * , lnt*g«rj*©H ) 
VanjBtatui m v*sS_to w aeei1_tfae < lnt»ger_n©H , 
1 Char act erenow > 

wMta Co,*) * starrest she ACS control progrw *t % 
1 Cha ract er^nou 

c 

C. -Create the event flag cluster , clear Interrupt flog 
C 

Sys_$tetus * SysBescefc < £Vat CT ie»er_f t eg > , 

1 XdescrCCluster^naaie) , 0 , ) 

Sys_» totug * sys&clref ( Stval < I nterrupt_f lag )) 

C 

t Check to see if ACS_control has been down for wore than 

C 50 Btnutes* If so, initialise all active blocks. 
C 



Van^status * V*s*_f roa^itel f__t i»e ( , Integer^now ) 

If c Integer^now - I nteger^naxt jsyct e .gt* 2>0*oQ ) Then 
Po 10 Stock * 1,tiaxJ>iocks 

If C < BLock.statusCBtackHl :2) .ecu 'On* ) .or* 
1 < Btock_atatus(SLock>n:6> .»q. •Active* } .or, 

1 C Block^st«tus<Block>Cl:H) .«q* J Ju«t turned on 1 > 3 
1 Call lnftieMze_block ( Block > 
1 0 Cont i nue 

35 £ftt * 
C 

C* Tha sain block control loop 

1 Continue 

C 

40 C Sat system status to Sunning 

c 

SvateAj&t&tufc * •ftunnmg-toaput ing * 

t 

Cw.Set Wake up tiat to ACS_b*se_acan minutes fro® now 

4S C 

VanjttatuB « VtBB^f ror*j&*cH_t i»* C f * „ integarjiow > 
Van^stetus * v*s$_to_asci f_t i*e l im»ger_nott , 
1 Charaet*r_now ) 

InTegerjrtsxt^cycie * Int«ger_now * AC$„>a»e^»can*eO 
&° CaU V**$_set_syst iu ( Jnteg«r_next_cycle , Tinbuf ) 

c 

C+.*.Loop through all the blocks 
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c 

C.«.*Updat« the block Statu* from the fnfo coating from PCS 
C 

Call Check^block^tatus < Block ) 

C 

C... Check the block status, ff Inactive or off, skip It 
C 

If C C gioek_atatuaCBLock)<1 :3) ,®q. Mnactfv®' ) -or. 
1 C Block_4tatusC3tockX*U6) .*<*<, 'failed 1 ) .or. 
1 < Slockjfttatua(Block>Cl:10) 'dn-hoidl ne* ) -or, 

1 ( aiockj&tafcua{Btock)<1:3> .aq. •Off 1 . ) ) Then 

Go To 100 
fnd H 
d If € Mrat > 

d 1 wHt*(e,*> * Slock: ', block,' Status • • 

1 biock_Btatuacblock) 

c 

C...If the block has |ust been turned on; intttaliie ft 

C 

If <Slock_status<BLock)(1:U) *Juat turned on' ) Then 

Call lntHalixe>tock< Block ) 
End If 

C 

C.*.. Check to aee if it is tirae to execute the block 
C 

C Use appropriate calls for the block type 

C 



if ( 

1 ( fclock^type < Block ><1:B > .eq. 'Feedback' ) .or. 
I < Biock_type C Slock >(1;11> ,eq. 'Feedforward 1 ) ,or* 
1 < 3lock_typa C Block )<1j7 > .©q* '^rosrea 1 J 
1 > Then 

ACS^status * ACS_8*t_»©as_va retype < Block , Keas^type ) 
tf ( Weas_type . eq. Cur_val_vanj*ar > Then 

ACS^*tatua * ACS^ge t^sKzaa^var^num ( Slock , Heasjvar ) 
Van^statu* » Vss*o_eurt in© < Weas^ver , 
40 1 M«aaured_tiBe_fttarep ) 

Else 

Heaaured^tiawjrtamp » 0 
End If 



CUe If C 

1 < Block_typ© < ilock >(t:B ) *eq. »Shewhart' > 
1 ) Then 

ACS_atatu* * ACS_oet_f 11 tered^va retype < Slock , filt_type ) 
if ( filt^type *©q« Vanj*ar_f f t ter ) Then 

ACS^atatuft * ACS_9et^f f I tered^var^num £ Slock , filwar > 

Van_status * VssSg_eurt tme ( filt^var t 
1 Heasur«d_tirts_sta*ip } 

Else 

«a»»ured^t i«h«^«tamp * 0 
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End If 
End If 

«xac ti«e of kay block, if dafSnad 

KayJHock » varjiumZCStoefc) 

If C K*yJ>lotk *n*. Empty > Theft 

Kay^bloek.axae^t iia« w Lamt^axaeut ion_t tfc* C ICay^block ) 
EU* 

K*yJ»loek_*xac_fc l»* a 0 
End tf 

Exeeute w bUek * .F«U«. 

If C First .*q. ,Tru*. > Than 

Van_STATUS * v&&fc_to_sscH_t ism { Intaaarjiow , D«bu8_tiae ) 
wrU*C6,*> 1 Block « " f biock 
wHt*(6 # *> * t nt*8*r_now a 1 ,D*bti& w tf«w 

vanJTATUS « vaafc^to^aaeH^t Irw? C i»st_*x*ctJtton_t if»*< block) 
1 , D#bug_t isas- > 

ufite(6,*) 1 Last_executi on^tisw « * , t*ebap_t Sme 
wan_STATUS * vefc^to^ssc H_l fme (( O >*Praqu»ncy (block >*60 

1 , D&bufc^tiffHfc > 

ttrit*(6,*> »Fr*quftncy{ block) = * , D*bug_ti*>ft 

v«n_STATUS « v**S_to^&&ci i w t iae ( laat_®*a*ured_tiiae( block) 

1 , 0«bu^tl»e ) 

wHt&<6,*> l la«t w ra®asufad_ r «*»« * 1 ,&ebug_tfe»e 
Van^STATUS • v»**_t0_oscM_t i»* ( »»aaur*d_t in«_atanp 
1 , Dftbuo.tiaa ) 

wHte<6,*) *p&«a*ur»d_tiei*_stamp * * ,DebkiB^t*ee 
wrfta<6,*) *tf»in»_option * *, V«r_num3< Block > 
End If 

I_tf»ins_Option H VaT_nuH*3< Block) 

Sf < < I_ti»if»9_optton .eq. Interval > # and, 

1 ( Intaoerjnow * t»st_ex«cutf on_tis*»< Block) „bb, 

1 f raquancy( Slock ) W 6D> ) Then 

1 Las E_exaeut.on_tia8eC$ lock) « Int®9BT_now 

Lastj*aBfturad_t iaaCBloek) » Ba&sur&d^t i*s©_«fcstt3?> 

Ex«cut»_block a # True, 

Else If C I__ti»ing_option -*C|, 

1 lt*y_offjMasyr*d_ variable )Than 

If < Nas£ur*d_tiB&_atamp .gt. 
1 Laatjaaaaurad^t f&aCtlock) ) Than 

Laftt^axaeutfon^tfaeC&lock) ■ lnte0erjn©w 
Last jaea*ur*d_t Block) * W*asur*d_t ?»»_*tfflmp 
Ex*cut*_bloek ■ .True* 
End If 

Elfte If { J_t tming^opt ton ,*q,. 

1 _ Kay_off_ACSJ*lock ) Then 

If { K*y_block_®xac_t i«* .at* 



23 



EP 0 335 957 B1 



1 Ffx_tiu«(Block) > Then 

laet^execution^tiaetBiock) a lnteg*r w nou 
Laatjaeasured^t iatCBLotJO * H*atur*d_t iam.,staaf> 
$ ix_tf»e<blaek) * Key J> t oefcjNtec.t I a* 
Ixecutejsloek 9 *Tru*. 
End If 

SUa If X l^tiatna^option 

1 Intrv^aftd^y^off^ACS^bt^cIt) Then 

If < 

1 njt_tiswt(aieck> ) ,or. 

1 ( lntes«r_naw * Laat^axacut \ on^t Im{ Slock) .o». 

1 F raquency C B I ock >• 60 > 

t > Thsn 

last^exacutf on w ti&e<slack) » lnug«f^o« 

Last jaeaaured^t Block) a H«asur*d_t tnejttavp 

Hx_Hia*<btock) * Kay_block^ax*e^ti»* 

End If 

EU* If t I_t iaing^opt ion **q. 

1 Intr*i_andjteyj>f f_j&aaa_v*r) Then 

If i 

1 < Mea*ured_tiflte_*taap .at* 

1 Laatj%ea*ured_tifate(Btock} J .or. 

1 t lntefl*r_now - last^axecuti on_f f»*<ft lock) .ge, 

1 frequency <&L ock>*60) 

1 > Then 

Laot_execution_time<Biock) » Integer^now 

L«st_B«&*ur*d tiaj*(SlociO » Meaaured.ttaejEtans 

Hx_Hfte{block) » Key_bloc^«x*c_tirae 

Executejatock * .True. 
End If 

Else If C J_tlfaina_option «eq* 

1 K«y_of f_8«aa_var_»r*d_ block) Then 

if < 

1 < fiCeyJ&lock^exec^tia© .at. 

1 Fix^tiawCBlock) ) .or. 

1 < Measured_t ine_ataap „at» 

1 L&st_&aaaured_tfiB«{BLock) ) 

t ) Than 

La* t„extfreution_ti»e< Block) » tnteg*r_new 

Lafttjaeaaured.t iaeCBiock) « «ea*ured^t Sae^ataap 

Hx_ttae{btack) * KeyJalock_ax«c_t taw 

ExecuteJ&loefc * ,Tru*. 
End If 

EL a* If ( i_t tatma^optian .«q« 

1 Jntpvl _&nd_* «y jaeas^a nd_b I oc k ) T hen 

If t 
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1 ( KeyJ>lecfc„jfcxtc_ti»e .ft. 

1 Fix.jMmeCBlock) > .or. 

1 c MtB*ur«d_ti»t_»tftnp .ft. 

1 Las t_*»e*sur*d w t i »*< » L oc k ) ) -of. 

1 ( Jntee>er_now " last^execut ion_tf»e( Slock) .it* 

1 Frequency* B I oefc}*60) 

1 ) Then 

Lest^axecution^tfeieCBlock) » tntefftfjtou 

L*stjaeaeured_t1&eCBlock) » Beasured_ti»a_&tassp 

f ix^ti ease block) * *eyj»leek_«xfcc_tia* 

Execut*_blocfc « .True. 
End If 
End if 

C 

C,.»lf Ti»e to execute, call the Subroutine for the appropriate block type 
C 

If ( £xecute.>lock *eq. .True. ) Th«n 

If C Slock^type<8loek)C1:11> .&q. 'Feedforward' ) then 

Celt Fe«dforwardJ>tock (Block) 
£Ue If ( itock^typeCBlockXtsfi ) .eq. "Feedback* ) then 

Celt Feedback Jb I ockC Block) 
Else if C 8Uck_type(BUck>(1:7 ) .eq. 'Program' ) then 

Cell FreexaaJ&locfc c a lock) 
Else if C 8Lock_typ«(8tock)Cl;e ) .©q- 'Shewhert* ) then 

Call Shewh*ftJ>toekC Block) 
End if 
End if 

C 

100 Continue 

C 

C..,All Blocks checked and executed if needed; go to sleep until needed 
C 

1 02 Cont t nue 

C 

Sysjttatus * Syafcsettmr ( XvaUT l»*r_f Ug) t Stref CT imbuf ) tt ) 
If <Sys_$totus ,eq- Xloc(Ss£_norsial ) ) Then 
d Write<6,*) » Successfully set tia«r.» 

Else 

Write<e # *) * Error return from setiwr in Control at *, 
1 Cheraeter^no* 
End If 

c 

Systeei^stetus * 'Sunn ins* Sleeping * 

Sys^etatus * SysSwflor < XvaUTiaerJ* leg) , *vet m»9J»*sk) ) 
H C .f*ot„ Sys^stetus ) Call Ub*sf ©naUXval <$yt_st«tua>) 

c 

Sys^status • aysSreadef ( XvsUTine rifles ) $ 
1 Xref <Event_f l«9_state> ) 

If C .not. Sys^status ) Celt L ibSaignftl CXvat(Sys_ttatus) ) 

c 

If ( ( $ys w statuft *ne. %toc<$t&^u«scl r) ) .and* 

^ ( Bys^status *ne. Xi oc( SES_wsss*t ) ) > Then 
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urit*(6,») * ProbUaa reading *v«nt fUg status 1 
£nd if 

C 

C*.T«st th* interrupt bit- if &$t # proeaaa ths raqu©»t 
C 

if t lnt*rrupt_f Ufl_*vt() > Than 
d Wrlt«<6,*> 'sot an interrupt' 

io CaU Shutdown < Evant^f Ut_8tat» ) 

EUft 

d Wfclt*{6,*> 'Tiaaer «»pir©d** 

£nd If 

c 

first » „*aU«. 
So To % 

c 

End 

20 



25 Build-Supervisor Procedure 

[0140] The build-supervisor procedure 810 presents templates 812 io the user and stores the user responses to 
these templates in a "global section" portion of memory (jja a shared or commonly accessible portion of memory). 
That ts } the user inputs to the tern plates for the various blocks 851 , 852, etc, are stored where the base cycle procedure 

30 802 can access them and the build-supervisor procedure 81 0 can also access them. Thus, an authorized user can at 
any time interactively call up data from shared memory space 81 4, see these parameters in the context of the templates 
812, and modify the functions of the various blocks 852, 853, etc. and/or define new blocks {and/or delete existing 
blocks}, while the base cycle procedure 802 continues to call the various blocks on the appropriate schedule. That is, 
the base cycle procedure 802 Is preferably a cycling procedure which satisfies the real-time process control demands 

25 of the underlying process, while the build-supervisor procedure 81 0 retains the capability for reconfiguring the operation 
of the various blocks in the supervisor^ according to user input 

[01 41 ] It should be noted that the structural features and advantages of the build-supervisor procedureare not entirely 
separate from those of the supervisor procedure. The two procedures are preferably operated separately, but they 
provide an advantageous combination. The features of the supervisor procedure are partly designed to advantageously 
40 facilitate use of the build-supervisor procedure, and the features of the build-supervisor procedure are partly designed 
to advantageously facilitate use of the supervisor procedure. 

[01 42] In the presently preferred embodiment, the nexus between the build-supervisor procedure and the supervisor 
procedure is somewhat different from the nexus between the build-expert procedure and the operating expert proce- 
dures. The user entries made into the more constrained parts of the templates can be transferred fairly directly to the 

45 operating supervisor procedure: the build-supervisor procedure stores values (corresponding to the data input by the 
user in the accessible fields of the templates) in a section of memory, which is immediately accessible by the supervisor 
procedure as soon as the stored status value for the block is changed to "Active". By contrast, if the customized user 
routines (including the expert routines generated by the build-expert software) are modified, they must be compiled 
and linked with the supervisor procedure. 

so [0143] The build-supervisor procedure 810 preferably also has the capability to stop or restart the base cycle pro- 
cedure 802, independently of whether the build-supervisor procedure 810 has updated the shared memory 814 in 
accordance with user inputs to templates 812. 

Top-Level Menu 

55 

[0144] The user who begins an interaction with the build-supervisor procedure is first presented with a menu which 
(in the presently preferred embodiment) resembles that shown as Figure 16. This menu provides options which permit 
the user tosetup (or modify) blocks, to monitor blocks, to call block-management utilities, to exrt, orto go into a structured 
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environment for writing user programs. 

[0145] If the user chooses block setup, he next sees a menu like that shown in Figure 9. This menu is presented to 
the user by the build-supervisor procedure 810 1o select a specific existing template 81 2' (Le. a template with the 
previously defined data values of a particular block are shown in the appropriate fields of the template) or a blank 
$ template 81 2 of a given type to provide user inputs to define or modify a block 851 , 852, etc. 

[01 46] This form allows the user to choose which block to enter setup parameters for, and t if the block is a new one, 
allows a choice of which type block it will be. To go back to the previous form (in this case the top-level menu), he can 
press the key on the keypad. 

[01 47J To set up a new block, the user can either enter a block number which he knows is not in use, or the build- 
10 supervisor procedure wtil provide him with the lowest number block which is not in use. To enter a biock number, the 
user can simply type the number in the block number field and press the return key To get the build-supervisor procedure 
to find the lowest number unused block, the user can press keypad 8. The cursor will move to the block type field and 
the build-supervisor procedure will request that the user enter the number from the list for the type of block desired. 
The build-supervisor procedure will then present the user with a block setup form for that block type. If the user mis- 
is takenly enters a biock number which is already in use, the build-supervisor procedure will go directly to the setup form 
for that biock, but the user can simply press keypad minus on the setup form to go back to the block setup selection 
form and try again. To enter or modify setup parameters for an existing block, the user can simply enter the block 
number and press the return key, and the build-supervisor procedure will present the block setup form for that block. 
[0148] In the best mode as presently practiced, all four block setup forms have some common features. Keypad 9 
so will move the cursor from anywhere on the form up to the block number field. Keypad 8 will find the lowest number 
available block and set it up as the same block type as the form showing on the screen. Keypad 7 tests all the parameters 
on the biock and changes the block status to switch it on or off, or requests new data if the user has not yet supplied 
it. (In addition, many of the parameters are checked for gross error as the user' enters them.) 

[0149] The various block setup forms shown as Figures 10 through 1 3 will be individually described below; but first, 
2$ some features common to some or all of the block setup forms, and some features characteristic of the operation of 
the blocks thus defined, will be described, 

[0150] When a biock is turned on, the block status will not go directly to "On." (The full system of block status options 
(in this embodiment) is described below.) Depending on how the block is set up to be switched on and off, the status 
will change to "Toggled on B or "Active*. The base cycle procedure will update the status as the block is executed, 
30 changing to "Just turned on b and then to "On". When turning a block off, the status will change to "Off" or "Inactive", 
again depending on how the block Is set up to switch. These status sequencing rules facilitate use of initialization and/ 
or shutdown steps in controlling block functionality 

[0151] Any time a parameter is entered or changed on a setup form, the block status will be set to "Inactive." This 
means that the block parameters have not been checked to assure that everything needed has been entered and is 
55 consistent. If a parameter is changed on a block which is currently on, the biock must be toggled from "Inactive* to 
"Active" or "Toggled On" using Keypad 7. 

Data Source Specification 

to [0152] The templates presented to the user for block customization include a standardized data interface. The data 
values to be used by the supervisor are specified in the standard interface by two identifiers. The first identifies which 
(software) system and type of value is desired. The value of a setpoint in a particular distributed control system, the 
value of a sensor measurement in a particular process monitoring system, the value of a constraint from a process 
control or supervisor system, and time averages of sensor measurements from a particular historical database are 

45 examples of this. The second identifier specifies which one of that type of value is desired, for example the bop number 
in the distributed control system, 

[0153] For example, in Figure 1 0 the user has entered "4" in the highlighted area 1002 after the phrase ''Measured 
Variable Type:". This particular identifier (Le. the value entered in this field by the user) indicates that the variable type 
here is a current value of a variable from the historical database, and the build-supervisor procedure adds an abbre- 

so viated indication of this ("Current Val Hist Dbase Var # w ) onto the user's screen as soon as the user has entered this 
value in the field 1002, (If the user entered a different code in the field, a different short legend might be shown. For 
example, as seen in Figure 10, the user has indicated a variable type of m 2* after the phrase "Manipulated Var Type rt , 
indicating that the manipulated variable is to be a loop goal of the DMT control system.) As the second identifier, the 
user has indicated a value of "2990 11 in field 1004, to indicate (in this example) which particular Database variable's 

ss current value is to be used. For this identifier to, the build-supervisor procedure adds an abbreviated indication of its 
interpretation of this identifier ("DMT PRD MFB SHWRT DEVI AT") onto the user's screen as soon as the user has 
entered this value in the field 1004. 

[0154] Data values specified through the standard interface may be used as measured values, manipulated values, 
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or as switch status values indicating an on/off status. Preferably the interface allows the user to specify data in any of 
the relevant process control and data collection systems used for the process, or for related processes. Preferably 
the interface also allows specification of data (both current and historical) in a historical process database. Since 
multiple control systems (or even multiple historical databases) may be relevant to the process, the standard interface 
s greatly facilitates the use of relevant data from a wide variety of sources. 

Block Timing Information 

[01 SS] In the presently preferred embodiment, all blocks except the Shewhart block provide the same block timing 
10 options. Block timing determines when a block will perform its control actions. The build-supervisor procedure provides 
three fundamental biock timing options, which can be used in any combination, providing a total o1 7 block timing 
options. The three fundamental options are; 

Fixed Time interval: the biock wilF execute at a fixed time interval. The user specifies the time interval, e, a in minutes. 
(Note that a combination of this option and the following has been specified in the example of Figure 1 3, by the user's 
is entry of n 6 n into field 1306.) 

Key Off Measured Variable: the biock will execute every time a new value is entered into the process database lor the 
measured variable. The measured variable must be a "sampled" type variable. (Note that this option has been specified 
in the example of Figure 10, by the user's entry of "2" into field 1006.) 

Key Off Another AOS Biock: the biock will execute every time a (specified) lower numbered block executes. The user 
so specifies which block will be the key block. Any combination of one, two or three timing options can be used. Blocks 
using a combination timing option execute whenever any of the specified timing options are satisfied. (Note that this 
option has been specified in the example of Figure 11 , by the user's entry of "3" into field 1006.) 
[0156] Block timing options are represented on the setup forms bya number code. The user enters the number code 
corresponding to the desired timing option. If the timing option includes fixed interval timing, an execution time interval 
2S must also be specified. If the block is to key off another block, the key biock number must be specified. 

[0157] In future alternative embodiments, the block timing options set forth here may be especially advantageous in 
multi-processor embodiments: the separation of the control action specifications in multiple blocks shows the inherent 
parallelism of the problem, while the keying options in which one block keys off another show the block sequencing 
constraints which delimit the parallelism. The standardized data interface used in the presently preferred embodiment 
so may also be advantageous in this context, by allowing block execution to be keyed ofl events external to the supervisor. 

Primary Block Switching 

[0158] The supervisor procedure provides several ways to switch biock actions on and off. If the block needs to be 
35 turned on and off by an operator, the bulfd-supen/isor procedure allows the user to specify an external switch system 
and a swilchable entity within that system which the biock on/off status is to follow. For example, the user may specify 
a specific control system and a loop number within that system. The block will turn on when that loop is on, and off 
when that loop is off. The standardized data interface allows any accessible control system to act as the switch system. 
As a further alternative, the blocks can be set to switch on and off only under the control of the developer (i.e. under 
40 the control of the build-supervisor user). In this case, the block can only be switched using the toggle on/off function 
on the block setup form. 

[01 59] The external switch system is represented on the block setup forms by a number. The user enters the number 
corresponding to the external switch system he wants to use. The entity within the switch system (e. g. the loop number) 
is entered in the next field. (In the example of Figure 10, the user entries in fields 1008 and 1010 have specified an 
45 external switching variable.) If the block is to be turned on and off only from the build-supervisor procedure setup form, 
a zero is entered for the switch system number, and the word "Manual" will show in the field for the switch entity number. 
(This option has been selected in the example of Figure 13.) 

Secondary Block Switching 

so 

[01 60] The supervisor also provides secondary means of controlling biock execution. Blocks which have been turned 
"on" by their primary switch controls may be "selected'^ "de-selected", or "held" by programmatic requests. The status 
of selected blocks changes to "On~selected lf , Selected blocks continue to function as if they were "On*. The status of 
blocks which are deselected by programmatic request changes to "On -deselected". De-selected blocks take no control 
55 action. However, they differ from blocks which are "off" because they continue to maintain all their internal information 
so that they are always ready to execute if "selected". The status of blocks which are held by programmatic request 
changes to "on-holding". The programmatic request includes the length of time the biock is stay on hoki Blocks which 
are holding act as if they were off. When the holding time expires, the status oi holding blocks changes to "Just turned 
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on/' and they initialize. 

{01 61] One advantage of these block switching options is that they provide a way to embed alternative control strat- 
egies in the supervisor procedure. That is, control strategies can be readily changed merely by selecting some blocks 
in the supervisor procedure and/or deselecting other blocks, This is advantageous in terms of software documentation, 

s since it means that alternative control strategies can be documented and maintained within the same software structure, 
M is also advantageous in interfacing to other procedures: for example, the expert systems called by the presently 
preferred embodiment will frequently take action by selecting and/or deselecting blocks of the supervisor procedure. 
[0162] These block control options facilitate the use of one supervisor procedure to interface to multiple controllers, 
and the use of one supervisor procedure by different users to control different processes. The block status system 

to permits one or more blocks to be updated without interfering with the running supervisor process; in fact, in optional 
environments, multiple users could be permitted to update different blocks at the same time. 

Block Description Fields 

T£ [0163] AM blocks allow the user to enter three descriptive fields. These fields are for user reference and can be 
searched when printing lists of block parameters. They have no eff ect on block actions. The "control application name" 
field allows the user to group blocks that are part of the same control application by giving them all the same application 
name. (In the example of Figure 10, the user entry in field 1014 has specified "MFB Control". Note that the examples 
of Figures 11,12, and 1 3 show corresponding entries m this field.) The block description field allows the user to describe 

zo the block's specific action or purpose, (In the example of Figure 13, the user entry in field 1316 has explained that this 
is a "Block to run expert deciding where to take MFB feedback action".) The ownership field specifies which user has 
control of the block. (In the example of Figure 10, the user entry in field 1012 has specified "Skeirik". Note that the 
examples of Figures 11, 12, and 13 show corresponding entries in this field.) This field facilitates use of the organization 
described in environments where multiple users are defining blocks which run within the same supervisor procedure. 

2& [0164] Of course, in multi-user environments it may be desirable to allow some users a greater degree of access 
than others. Thus, for example, some users may be authorized to edit a block, while others maybe authorized to toggle 
the block on or off but not to edit it, and others maybe authorized to monitor block operation but not authorized to 
change it. Similarly, access to expert systems may be constrained by giving greater authorization to some users than 
to others; some users may be permitted to make calls to the expert system but not to edit the rulebase, and other users 

30 may not be permitted to do either. In the presently preferred embodiment, ail of these choices can readily be imple- 
mented by using the file ownership and access control list options available in the VMS operating systems, but of 
course this functionality could be implemented in many other ways instead. 

Action Logging 

35 

[01 65] The supervisor procedure provides a means of reporting control actions and/or fogging them in a file for recall. 
Control action messages are written by a user routine. Control blocks call user routines after their control actions are 
complete, and pass data regarding their actions. The action log file field allows the user to enter the name of the file 
to which logging messages will be written. The same log file can be used for more than one block (e.g. if the two blocks' 
40 actions are part of the same control application). (For example, note that field 1018 in the example of Figure 10 and 
field 111 6 in the example of Figure 11 both specify "MFBCONTROL ,} as the action logging file.) The log file name is 
limited to letter and number characters, and no spaces are allowed (except after the end of the name). 

Block Status 

4$ 

[0166] Note that, in the example of Figure 10, a block status of "On-selected" is displayed in area 1020. This is not 
a field into which the user can directly enter data, but it will change in response to user actions (e.g. the user can toggle 
the block on or off by hitting keypad 7). The block, status codes used in the presently preferred embodiment reflect 
several aspects of block setup and execution, including: 

so 

Proper configuration of block parameters; 
On/off status of block; 
Failure of block actions; and 
Failure of user routines. 

55 

[01 67] Some common block status values are: 

[0168] Inactive:" this indicates that the block has not been properly configured and toggled on, or that a parameter 
was changed. This is also the normal "off" status of a block which has been configured to switch on and off with a 
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switch system variable, if the user toggles it off from the setup form. 

[0169] "On:" this is the normal status for blocks which are performing their control actions, 

[0170] "Off:" this is the normal status, for a block which has been configured to switch on and off with a switch system 
variable, when that variable is in its off state. This is also the norma! status for blocks which are configured to switch 
$ on and ofl through the setup form only and have been toggled off from the setup form. 

[0171] "Active:" this is the status to which a block is toggled on if jt is configured to switch on and off with a switch 
system variable. This status will change on the next cycle of the control program, to "On" or to another value, depending 
on the state of the switch system variable, 

[0172] Toggled on:" this is the status to which a block is toggled on if it is configured to switch on and off through 

10 the setup form only. This status will change on the next cycle of the control program, 

[01 73] "Just turned on:* this is a normal transition state for blocks going from an "off" status (eg: off } inactive) to "On" 
status. Blocks whose status is "Just turned on" will be Initialized by the base cycle procedure, which resets the last 
execution time and the measured variable and key block times used for block timing. Feedforward blocks initialize the 
"old" measured variable value to the current value. 

15 [0174] "On-selected": indicates that a block which is on has been selected by a programmatic request. The block 
continues to function as if it were On. 

[0175] "On-deselected": indicates that a block which is on has been de-seiected by a programmatic request. The 
block takes no control actions, but continues to maintain its internal parameters as if it were On. This keeps the block 
ready to act if selected. 

20 [0176] "On-holding": indicates that a block has been put on hold for a specified length of time by a programmatic 
request. The block takes no control action. A block that has been holding will re-initialize and go back to "On" status 
when the holding period expires. 

[0177] 'On-Failed usr routin; 11 this status indicates that a user routine called by this block had a fatal error which was 
bypassed by the supervisor procedure on the most recent execution of the block. Fatal errors in user routines are 
2& reported in the control program log file (not the same as action log files), and can be reviewed using the "List log file" 
option on the System Functions screen, described in the section on block monitoring. 

[0178] "On-Recovrd usr Error:" this indicates that a fatal error was bypassed in the user routine, but that the user 
routine ran successfully on a later execution. Again, the log file will give more details about what happened. 

[01 79] "On-Err : n many abnormal status values can indicate that problems were encountered in block execution, 

30 iLSL Problems in the input or output of data to control systems. The latter part of the status field gives some indication 
of the problem. Most such errors are also recorded in the control program log file. 

[0180] Various other block status values can readily be inserted, along the lines demonstrated by these examples. 
Feedback Blocks 

35 

[0181] Figure 10 shows a sample o1 a template B12 presented to the user to define a feedback block. In the specific 
example shown, the block being worked on is block number three of the 200 available blocks 851, 852, etc., and the 
various data values shown in this Figure reflect the entries which have been made at some time to define this particular 
block. 

40 [0182] The feedback block provides proportional feedback action. In feedback action, the user specifies a measured 
value (called the "measured variable") and a goaf value (setpoint) at which he wants to maintain it. Feedback action 
calculates the "error" in the measured variable (measured variable value - goal), and computes its action by multiplying 
the error times the "proportional gain 1 '. The current value of the ''manipulated variable" is changed by the amount of 
the calculated action. 

4S [01 83] The basic feedback action can be altered by several additional parameters. A deadband around the goal can 
be specified. If the measured value falls within plus or minus the deadband of goaf, no action is taken. The amount of 
action taken can be limited to a fixed amount. The range over which the vaiue of the manipulated variable can be 
changed can be limited to keep it within operable limits. Screening limits can be specified on the measured variable 
value, in which case measured values outside the screening limits will be ignored. Block timing and switching and the 

so block description fields follow the general outlines given above. 

[0184] Specifying a feedback block on the block setup selection form (Figure 9) brings up a feedback block setup 
form, as shown in Figure 10. 

Parameters 

55 

[0185] The parameters which the user is asked to specify include: 

[0186] Measured variable type; a number code representing the software system and the type of entity which the 
block should use for the measured variable, {A sample response might be a number code indicating a Historical da- 
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tabase variable.) 

[0187] Measured variable number: the number of the entity within the specified system which the block will use tor 
the measured variable, For example, if the measured variable type is a historical database variable, the measured 
variable number Is the number of the variable in the historical database. After the measured variable type is entered, 
s the label next to this field will show what type of data is needed. When the measured variable number is entered, other 
fields will also be filled in: the name and units for the measured variable, deadband and goal; units and default values 
lor the max and min measured values. If block timing is to key off entry of new data into the measured variable, only 
discretely sampled variable types can be used. 

[0188] Goal; the value at which the measured variable is to be "held 11 . The value is entered in entered in the units of 
10 the measured variable. 

[0189] Manipulated variable type: a number code representing the "target system" - the software package and the 
type of entity which the block should manipulate. Examples are; control system loop goal, historical database variable, 
a setpoint in a distributed control system, or a setpoint for a programmable loop controller 

[0190] Manipulated variable number: the number of the entity within the target system which the block will manipulate. 
1B For example., if the manipulated variable type is a control system loop goal, the manipulated variable number would 
be the number of the loop whose goal Is to be changed. The label next to this field will show what type of information 
is needed; in this case the label would show "Cont Sys loop 

[0191] Proportional gain: the constant relating the change in the manipulated variable to the error. The units of the 
gain are shown to the right of the field after the measured and manipulated variable have been specified. Control action 
£0 is calculated: 

Error = [Measured variable value - goal value] 
2S Manipulated delta = Error * [Proportional gain] 

[0192] The manipulated delta is added (subject to limits) to the current value of the manipulated variable. 
[0193] Deadband: A range around the goal value. If the value of the measured variable fails a range defined by the 
goal plus or minus the deadband, no action is taken. 
50 [0194] Timing option, execution time interval, and Key block number: these parameters are those described above. 
[0195] External switch system and switch number: these parameters are described above. 

[0196] Maximum manip delta: the maximum change that can be made in the manipulated variable's value in one 
■ control action. 

[0197] Minimum and maximum value of the manipulated variable: limit values outside which control action will not 
35 move the value of the manipulated variable. If a computer control action would put the manipulated value outside the 
limits, the value is set equal to the limit. If the manipulated value is moved outside the limits (by operator action, for 
example) the next control action will return the value to within the limits. 

[0198] Minimum and maximum value of measured variable: Screening limits for reasonable values of the measured 
variable. Any time the measured variable value falls outside these limits, the value will be ignored and no action is taken. 
40 [0199] Action log file: this specifies the name of the log file for action logging. 

Feedback Block Operation 

[0200] The sequence of actions performed by each feedback block, when executed by the base cycle routine, is: 

45 

If block status is "On-deselected* , do n further actions; 

Get the current value of the measured variable (If not accessible, set status to "On -err, ... B and do not urther actions); 
Get the current time stamp of the measured variable; 

Test the value of the measured variable. If it is outside the minimum and maximum allowed values, set status to 
so M On-msrd out of Hms B and do no further actions. 

Get the current value of the manipulated variable. If not accessible, set status to "On-err * and do no Jurther 

actions. 

Compute the error (- Measured value - Goal). If absolute value is less than the deadband, do no further actions. 
Compute the change in the manipulated variable: 

£5 

Deita_manip = Error * proportional Gain 
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If the absolute delta is greater than the maximum allowed delta, set It equal to the maximum (maintaining proper 
sign). 

Compute the new value of the manipulated variable: 

5 

New manip value = Current manip value 4- daita_manip 

if the value is outside the max/min limits, set it equal to the nearest limit, if limited, recompute the delta using the limit 
Change the manipulated variable value to the new value computed, If not accessible, change status to *On-err ... 
to " and do no further actions. 

Load user array values for use by the user routine. 

If delta_manip is not zero> update the past action values and times. 

Call the user routine. 

18 Data passed to the user routine 

[0201] In the presently preferred embodiment, each feedback block is able to pass information about its actions to 
the user routine, by using a commonly accessible memory block named ''User_vars. ,r (The use of this data by the user 
routines is described in more detail below.} The data passed by the feedback block may include: 

20 

"Userjnteger(t Y - the time stamp of the measured variable (from the database); 
"User_integer(2) 1! - the time the action was taken; 
H User_real(1) M - the change in the value of the manipulated variable; 
,, User_real(2) 1 ' - the computed error; and 
zs H User_character(1)" - a string (alpha-numeric) sequence which describes the block type; for feedback blocks this 

is set to be = 'Feedback'. 

Sample Source Code 

so [0202] The source code for the procedure which actually performs this function, in the presently preferred embodi- 
ment, is as follows. 
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v 
c 



C P ©edbac k_b t oek * f or 
C 

C ACS subroutine to do feedback action on the Va*, communicating 

C directly with the target syateau 



C 

c 




c 



Subroutine Feedbacfc^bLock C Slock ) 



C 



I nc i ude * AC$$i nc I udea :©l oek^par ©meters , i ne/nol i at e 

I ne i ude 1 ACS& I ne t udes : V&n^f unc t f en* • i ne/no list' 

I nc L ud® 1 AC$$i nc t udea:Ussr_var$ • inc/nol i at * 

I nc t ude 1 AC $% i nc t ude* i ACSs t a t us . i nc/no list* 

i r»c I ude 8 ACS&t nc I udes:AC$aerv« i ne 4 

I nc I ude ' Ac sS i no I uda a s T I ft«rv . I r*fc 1 

include *AcsSinelud^s:TI»tstus*<nc l 

I nc I ude * ACSS i nc I udea : Ken i p„pa rams . i nc * 

I nc I ude 1 ACSS i nc I udes i Meaajaararas . i nc • 



C 

C*. Special handling for * On- deselect ad 1 status * do nothing 
C 



If < Slock_etatu*CBlock)0:13) .*q, *On-d*aelected* > Then 

Return 
End If 



C 
C 



lnteger*2 
Integer*^ 
Integer*** 
Integer*? 
Integers 
Integer*^ 
Integer** 



W ©a a^va r^sys t mm 

Wan 1 p w va r^ay s t eia 
Wan i p^varjtuwber 
Slock 

ftes8ur®d_tis&&^fltarap 

Integerjioa 

now^tias® 

tteasur ©d_vB I g$ 

Cur r entjaani pu I at «d_va i ue 

Newj»anipulated_value 



Ch«racter*20 



Reai*4 
Real** 
(tea 1*4 
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C 

AC$_9t»tws * AC$_g*t.j»*a«_v&r_typ* < Stock , MEA$_VAIt_8yate« > 
Kahip var eyatera » H&nipuLat&d var 1 Abl«(Sl«ctc) 
M«ni p_var_numb*r ** liau^sani pul«fsd w vor f abtatBloctc) 

9 urffeeCo,*} * Calling ne«_f eadbaek * block « ^bloek 

C 

e»*»Get the &a&aurad vatu$ 

10 C 

Von^atatus ■ Vaa*_f f ea_aacH„tlM < * * , tntager^now ) 
van^atatua « Vaa$^to_aac1 f _tita»( Itttagar^nota 9 noy^ti&so > 

C 

C. t .M«a«ursd Valua U TPA PCS loop goal 

J5 G 

If < Maaa^var^aystem *eq* PCS.jrpA^Loapjjoal ) Then 
ACS_status a ACS_g&t jaea^goalC »TPA * # 

1 tteasured w v&ri &Ma(3lock) , Meaaured^valu* ) 

If ( ACS_Status „r>«, %toc( ACS^succaaa ) ) Than 



C If PCS goal value not available, don*t execute 

Blaek^atatuaCBloek) * 'On-Err^PCS goal set* 
WrftaC 6, •) 'Faadback exit du& to maaaured var not available* 
wrtteC*,*}* ACS Block: block, 1 at: * f nou_tfM 
25 Return 



End If 

C 

€.. .H&a&ured Value I a . DttT PCS loop goal 

C 

30 

Else If < MEAS^varjsyatem ,aq. PC$_DHT_loop_goal ) Than 

ACS^atatua » ACS^get^pcs.goaU *DM7 ■ , 

1 Meeeurad_vari abie<Btock) t Meaaured_velue ) 

If ( ACS^Statua ^ne. KtocCACSjaHJtcaaa) ) Than 

ss C «lf PCS &oai value not avoi labia, don't execute 

aicck_»tatua(Slocb> » 'On-Err-PCS goal get 1 
Write* 6, *) 'feedback axtt due to &eaeured var not available 4 
ttr1tflC6, ,> ) , ACS Stock: * v btoek,* at: *,now^tiaa* 
Return 

40 End If 

C 

C* » .Measured Value is ACS block goal 
C 

45 Elee If ( tfEASjvar^aysteca *aq. ACSJ&loefc^soal ) Than 

ACS_Btatua * AC$_get_goal t 



1 tteasured_variable(Blocfc) f ftea*urad_value ) 

If < ACS_Statu* ,na. %lac< ACSj*uceeas> > Than 

C v .if ACS goat Value not available, don't execute 

so BlockjttatusCSlock) » ■On*Err*ACS goal get* 

UHte< 6, *> 'Feedback exit dua to measured var not available 1 
*Ht*<6,*>* ACS BUck: *, block,' at: '.nou^tis** 
Return 



End if 
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to 



15 



c,..wea*ured value fa vantage varaible 
c 

lUe If C Keaa^var^eyataa -*q* eur^vat Jf&njter > Then 

y*n w $tatu« « v*sSgj;urrentc Neastfred_yaH*bL*C Block) , 
1 ft*»tured_valut ) 

If C v»n_St»tu« .ne. Xloe(va*jriortt«l} ) Than 

c If Varaible Value not available, don't execute 

&lock_*t*tua'$Uek) ■ 'On-Fei led Hard v*r 1 

Writa( 6, *> 'Feedback *»it due to aseaaured var not available 1 
wr1te{6,*>' ACS tioefc: *,block,» *t: * # no*_tt®e 
Return 
End If 

C 

end if 

Van^ststus * Vatig^ourtlae ( tteaeur levari Ablet Block) , 
1 Bse&ured^tis&a^afcSBjp > 

C 

20 C Cheek the Neaatired variable to *ee if it la within lisaita 

c 

If ( (feeasured^vaiue *it» Staasurodj&f n(bl©ck> > ,&r» 

1 (W©aaured^valu$ *Qt» ileatured^raxC block) > ) Then 

C. , R®ject the data point 

^ «Mte< o # *> » Feedback exit due to out of I fare* Mftftured* 

«Hte<6,*}* ACS Slock: *,bl©ek,* at: *,neu_tis* 
8loekjatatua<Bloek> * »On-K*rd out of I tea * 
Return 
End if 

30 c 
C 

C.Get the current manipulated value 
C 

C 

c 

C*. Target i* TPA PCS Loop goal 
C 

If ( aftMp_var_syBte» .*q. i»e$^TPA_L©op > then 
4£? ACS^statutt * ACS_5et_pcs_foal< "TPA * t 

1 Wamp_var_nu»ber , Current jaeni put at ed_ve I ue f > 
If ( ACS^Statu* .ne. *tee(AC$_8U6cea«) ) Then 

C **,*tf PCS goal value not available, don't exeeute 

ttockjstatuftCSUck) » *On-£rr-PCS goal get* 
45 Return 

End If 

C 

C-., Target ia DtfT PCS loop Boat 

c 

Else If { Hani p_var_*y* tern PCS_ONT_toop > Then 

ACS M at«tua » ACSjeret^pca^geaK *DKT 1 , 

1 Kanip^varjnuaber , CurrentjaanS pulat«d_v*tus ) 
11 t ACS^Stetu* .ne. *loctACS_*ucce*s) > Then 
B& C * If fCS ©oal value not available, don*t execute 



so 
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Stock^atJStusCBtock) * *On-£rr*PCS goal gat* 
Saturn 
End If 

5 C 

C... Target U ACS block ^oat 
C 

£4a« If < HanJp_var_8yateist *®q* AC$J>leck J Than 
ACS_at«tu* * ACS^get^oat { Wan 1 p_va r _nu§&be r , 
70 1 Currantjaanfputated^valu® ) 

If ( AC5_Staius *n®. SlocCACS.sueeaaa) } Than 

C If ACS goal Valuta not available, don't asacuta 

aUck_statua<Sloclc) ■ «On-Err*AC& goal sat 1 
75 Return 

End If 

C 

C.«*Targat ia Vantage varaible 
C 

20 Elaa If ( Manip_var_ayatea .©q. 

1 Yanta$e_vari able > Then 

Van^Status « Getauvel ( Hani pj*a renumber ff 
1 Cur re'ntjaanipul at ©d^ valua > 

If ( VanjStatua -na. Xlocfvaa.jBuccesflt) ) Than 

^ C If Varaible Valua not available, don't axacute 

Slocfe M 3tatu&(&loek) * 'On-Err-Vant var get * 
Return 
End If 

€ 

C.* fc Tara*t 5 a Texas Instrument* control lar aetpoint in CRD 



C 



Else if ( { Hanip_var_ayaten ,b«* low_P«550 ) -and* 
1 t *anip_var_aystaia *le. HfJ»MS50 ) ) Than 



35 



If C Wanip_var_Bysta* .«q. CftDJESCHS_PH5 50_01 > Then 

ACS_atatus « T I_9et M loop.*«t point ( *TI_»«550J51 J>08T 1 
1 Man ip^va renumber , Currantjaam pula?ed_va Lue > 

Elae If ( Hanip^var_ay»tea .eq. Cft0JESCHS_aM5SflJ52 ) Then 
40 ACS^atatua * TI_get_toopjaet point t m JS>*550J32j>ORT 1 

1 Manip^var^nuiabar , Current jnanipu la ted^vatue > 

Elae If C Wanip^var^tyatem *eq, CRDJESCKS_PK550J)3 ) Then 
ACS^atatua « T t_ I oop^aet po i nt ( »T1 J»MSS0_0Sj»ORT 1 
1 *enip_var_nuttbar r Currant w »ani pulated_veLue ) 

Elaa If C Wan ip_var.j*ya tees .eq. CM^ESCHS J>*550 JK ) Than 
ACS^atatu* * Tl^flet^loop^aetpoint < «T1 J>J4$50_04 J>0RT * 
1 ttanip_v*r_nu»b*r t Current jaanf put at ed^vaiue ) 

£Ua If C Kent p^var^ayataw ,eq. CRI>^ESCttSJ>K$50„05 > Than 
ACS^atatua « Tl^get^loop^aetpoint < UI J»M550J)SJ>ORT ' 
1 Kanip_var_number , Currentjaani pulated^ valua > 

Elaa If < Hanipjva^ayatem .eq* a*D_ESCH$ J>H550J)6> Then 
ACS^status ■ Tt_$jet_loop_*etpoint C 'Tt J>H550 J56J>ORT ' 
1 M an i p^va renumber , Current_aanipul at ©devalue > 
65 Jf < »*nip_var_system .eq. Cftt^£SCM$J>«550_07) Then 



4B 



SO 
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ACS.statua ■ TI_aet_Loop^setpofnt < 1 T l^PHSSPJ^PORT » , 
1 *tanip_v» renumber , turrent^aaru pulated^va tu« > 
End If 

If C ACS^Statu* *fie, Xtoe<TS_&ucc38&) ) Then 

■ • If PW55Q aetpoint valu* not avef table, don't txecute 

|lock_atatu*(Block) * *On~Err-?I aetpnt 9«t* 
*JMte{ 6, *> 

1 * Feedback a* it - tl 8eMp var not lettable* 1 

UHte <6, *) • ACS Block: », block, 1 at: * # no«Lti«ae 
(let urn 
£nd tf 

Else 1 Other Manip device type 
End If 

. *.Vslus Is vftthtn H&rits * Test to s&© tf th« »rror is le&a that the deadband 

Error ■ Measured_v&lue - Goelt Block) 
If < Ab*( Error) .It* Afosol ute^de&dbandCS i&cfc} ) Then 
WrtteC 6, *> 'Feedback error I Pits than deadband* 
Return 
End If 

Compute proportional Feedback Reapon&e-Teat Beits to see if too $re&t 

Delta * Error * Preport ienel^g&inCBleck) 

If ( AbsCDelte) .gt. aa*jaenip^deU*<BUck> > Then 

Delta ■ Stert<H&x_iQ8nip_deltat&lock), Delta) 
End If 

— Calculate neu Manipulated value, check to see It attMn limits 
&J&wjsaniputsted_value « Currentjaanf put at ed_vstue * Delta 

If ( Uewjaanlpulated^veluft .g.t. Hani puiatedjaaxt Block) ) Then 

Wew_BsampuiBted_velue * Man iput&tedjeaxt Block) 
Else 11 C Wewja&nipulfttedjvalue .It. Want putatadjerinCBlock) > Then 

Wew^roeni put at ©devalue « Menlpuietedjaf n( Block) 
End H 

Delta * Mewj&anipuleted_ value - Current_@antpulated_valut 

. Transmit the new Manipulated Value to the aonip variable 

...Target H TPA PCS loop goat 

If < ttanip_varj&ysteai *eq. PCSjTPA^toop ) Then 
ACS^statu* » ACS_puej>cs_9o*U »TPA 1 , 

1 Hani p_va renumber , Heujaen ipul a ted_ value ) 

If ( ACS^Stetue .ne. XI oc(AC$_»uc»a*) ) Then 

If PCS eoel value not available, don*t execute 

Btock_et*tus{Block> ■ *On-Err~pes soat put* 
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w 



Write< 6, *) "?a<*db»ck axit dm to fatUd oanip var put, 1 
Wrft«C6,*> t ACS Blocks block, * ats ' t no«^tirae 
Saturn 
End If 

C 

C.^Taraat is DMT PCS loop goal 
C 

ii 99 11 t Manlp w v*r_*yat*B »ee}. PC$_&m_l©op ) Than 

ACS^atatua * ACS^jajt^pca^aoaU *&WT < , 

1 ttanip^var^nussbar , gauj^tnipuUted^vaLua > 

If I ACS_Statua ,na, SUocCACSj&ueeaaa) > Than 

C..*, H PCS goat valua not available, don't axaeuta 

75 aiock^statuatBlock) ■ *Ofv£rr*PC$ soat put 0 

Wf!ta( 6, *} 1 feodbftck ax ft dua to faU&d ea&nip var put** 
«rit*(6/)» ACS Blocks » f block,* atr «,noy_t1®a 
Return 
End! If 

so c 

C..*Target fa ACS block goat 
C 

ELaa If ( Hani p^var^aya taa *aq. ACS^block ) Tt*»n 
AC£_statua n ACS^put^goal < Hani p_va renumber , 
55 1 * ttew_jaani pulatad^vatua ) 

if { ACS^Statua .na. %loc(AC$_auccasa> > Than 

C *-.Sf ACS 90a I Value not available, don't axeeute 

BLock_status<&lock) « *On-Err-ACS goal put 1 
tfMteC 6, *} 'feedback exit due to failed aanip var put.* 
Wrftaco.*) 1 ACS 8lock: \block,' at; \now_time 
Return 
End If 

C 

C -Target is Vantage varaible 



30 



35 



c 



40 



Elae If C »empjvar_ayat«m .eq. 

1 Vantafl«_vsriable > Then 

Van_&tatus » Puteugen < Hani p^var^numbar , 
1 Newman! put&ted_ value ) 

If < Van^Statua *na* %lo£(v»a_aucceas) ) Than 

C If Varaible Valua not available, donU execute 

dlock_atatua(8tock) * »On-lrr-Vant var put 1 
Wrtt*< 6, *) * Feedback exit dua to fall ad aanip var put. 4 
4S < «rite<6.«)» ACS Block: », block,* at: «,now^tie*e 

Raturn 
end tf 

C 

C.-.Taraet is Texa* instrument* PK550 controller aetpoint in CSO 

so C 

£i«a If ( ( ftanf p^var^tygtea .ge., Low_PH550 ) *and. 
t < aanip_var_ayatem .la. ltf_PN550 ) ) Then 



65 



If ( aanip^ver^ayatem .eq* CRD_ESCHS_PH550 J>1 ) Then 
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ACS_*tatu» ■ Tl^put^leop^aatpofnt C 'TI^MtSSOjn.PORT" , 
1 Hanip^varjMifltear , Hawjaanipulated^valu* ) 

EUt If ( Kanfp^var^ayataw ,eq. CftDJSSCHSjmS50JJ2 J Then 
ACS^atatua « TI_put_loop^8*tpoinC ( »T1 J>K550Jl2j»aRT 1 , 
1 Wanlp^varjiuBtber , NwjMftl putatad^vatua ) 

ELa« If C Kanip_var_syata» ,aq. CBS_ESCK$J>H55 0J>3 S Then 
ACS^atatua ■ Tl^put^loep^aatpolnt C mj*550JI3J»ORT* , 
1 Manip_varjtu»b*r , stewjasnf pylatad.jfalua } 

Els* If C Kanlp_varj*yBt*fc ,,*q* Cftl>^SCH^«550_06 > Then 
ACS_at*tua » Tt_put_loop_aatpof nt ( *TI^P»550„04 - PORT« f 
1 Wanlp_v*r_mi©ber , Mattj^MtHiUtad^valwa } 

Else If < Nantp^var.ayataa ,®q. C*fiJE$CH$J»*t$50J>3 ) Then 
AC$_atatut » TijpHJt_Uop_$«tp©iftt i m_PW55CU)5j>©RT» * 
1 Hftnip_v*f_nufcber t ttewj^nlpuUt*d., < value ) 

EUO If < Manip^var^syatas .eq. C&DJE$CH$JW5CM>&> Then 
ACSjrtatua * TI._put.Joop.jaatpoint « m J>K5S0J)6J>ORT* t 
1 Ran1p_var_nusibar , 8ew_&&nJpuittt«d_valUft > 

Else If ( Manfp_verj*yataia .$q. eftD_ESCHSJ»M550J)7) Than 
ACS_statua * TI_put_loop_satpoint C * T I_P8550,J)7_PO8T 1 , 
1 Kanip^var^mjaber $ Me«jaamputa*ad_vatu& > 
End If 

If c < ACS^Statwa ,n®. XlocCTl^auccasa) *and. 
1 { A£S w statua .n*. fcloe(TI_cUfap*d) > Then 

if P&550 aatpofnt value not aceaaefbla, dent ax a cut a 

Block^atstusCBlock) * 'On-Err-Tl aatpnt put' 
tfrltac 6, *) » Fe*dback axt* - TI P8550 »anfp var not puttabl 
Writa <6, *) » ACS Slot*: «, block, ■ at: ' t noy_tfaw 
Saturn 
End If 

Else « Other ©snip device typ«8 
£nd If 



...Load special array* for user programs to lea swaaages. 



User^intagerCl ) B 
Uaer_fntaofcr(2) * 
User^raatO) ■ 
Uaer_reaU2) * 
Uaar charactarC 1 ) 



Naaaured^t t 8*«_&tamp 

Inteser^jiow 

Delta 

Error 

9 "Feedback ' 



..If Dalta fa non**er», updat* peat actfona 



If < Daita .na_ 0 ) Than 
Do 9D 4 * 5,2,-1 

Paat_aetton^valu»{Bloek,*l) « Pa«t_action_valyaCBloeSt, J-1 ) 

90 Paat_act ion_tims (Block, J) m Pa*t_act i on_t i»e CBlocfe,J-1) 

Paat^act ion^watua(filock # 1> «, Oalta 

Paat^action_tia« <Mock,1) * Intaoer^now 
Hnd If 



Call Usar aubprofframs for this block 
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w 



1B 



C 
C 

C»4»AU done 
C 

S&turrt 



Feed forward Block 



[0203] Figure 1 1 shows a sample of a template 81 2 presented to the user by the build-supervisor procedure to define 
a feed forward block, in the specific example shown, the block being worked on is block number six of the 200 available 
blocks 851 f 852, etc., and the various data values shown in this Figure reflect the entries which have been made at 
some time to define this particular block. 

20 [0204] The feedforward block provides proportional feedforward action. In feedforward action, the user specifies a 
measured value (called the "measured variable") and a manipulated variable whose value is to be changed in proportion 
to (or, more generally, in accordance with) the change in value of the measured variable. Feedforward action begins 
when the "old measured value" is set equal to a current value (usually when the block is first turned on). The measured 
variable is then monitored for changes in value and the manipulated variable value is changed in proportion. The "old 

55 measured value" is then updated to the value at the time of this action. (The use of the "old measured value" in feed- 
forward rules is one reason why an initialization stage is needed: if a feedforward block were switched from inactive 
status directly to on status, it might indicate a very large change to the manipulated variable if the delta were calculated 
from an out-of-date "old measured value,") 

[0205] In the presently preferred embodiment, the basic feedforward action can be altered by several additional 
^0 parameters. A deadband can be specified, so that, if the measured value changes by less than the deadband, no action 
is taken. The amount of action taken can be limited to a fixed amount The range over which thevalueof the manipulated 
variable can be changed can be limited to keep it within operable limits. Screening limits can be specified on the 
measured variable value, so that measured values outside the screening limits are ignored. Block timing and switching 
options and the block description fields follow the general outlines given above. 
35 [0206] In the presently preferred embodiment, specifying a feedforward block on the block setup. selection form 
(Figure 9) brings up a feedforward block setup form like that shown in Figure 11 . 

Parameters 

40 [0207] The parameters are; 

[0208] Measured variable type: a number code representing the software system and the type of entity which the 
block should use for the measured variable. 

[0209] Measured variable number: the number of the entity within the specified system which the block will use for 
the measured variable. For example, if the measured variable type is a historical database variable, the measured 

4$ variable number is the number of the variable in the historical database. After the measured variable type is entered, 
the label next to this field will show what type of data is needed. When the measured variable number is entered, other 
fields will also be filled jn: the name and units for the measured variable, deadband; units and default values for the 
max and man measured 1 values, jf block timing to key off entry of new data into the measured variable, only discretely 
sampled variable types can be used. 

so [0210] Goal: the goal field cannot be used for feedforward blocks. 

[0211] Manipulated variable type: a number code representing the software package and the type of entity which 
the block should manipulate. Examples are: control system loop goal, historical database variable. 
[0212] Manipulated variable number: the number of the entity within the specified system which the block will ma- 
nipulate. For example, if the manipulated variable type is a control system bop goal, the manipulated variable number 

ss would be the number of the bop whose goal is to be changed. The label next to this field will show what type of 
information is needed; in this case the label would show "Con! Sys loop #". 

[0213] Proportional gain: the constant relating the change in the manipulated variable's value to the change in the 
measured variable's value. The units of the gain are shown to the right of the field after the measured and manipulated 
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variable have been specified. Control action is calculated as: 

Measured delta = [Measured variable value - Old value] 

5 

Manipulated delta = Measured delta * [Proportional gain] 

The manipulated delta is added (subject to limits) to the current value of the manipulated variable. 
io [0214] Deadband; A range around the " old measured value*' (La the measured value at the time of the last block 
action). If the value of the measured variable is within plus or minus the deadband of the old measured value, no action 
is taken and the old measured value is not changed. 

[0215] Timing option, execution time interval, and Key block number: these parameters are described above, 
[0216] Switch system and switch number: these are described above. 
15 [0217] Maximum output delta: the maximum change that can be made in the manipulated variable's value in one 
control action. 

[0218] Minimum and maximum value of the manipulated variable: limit values outside which control action will not 
■u move the value of the manipulated variable. If a computer control action would put the manipulated value outside the 
limits, the value is set equal to the limit, if the manipulated value is moved outside the limits (by operator action, for 
20 example) the next control action will return the value to within the limits, 

[021 9] Minimum and maximum value of measured variable: These define screening limits for reasonable values of 
the measured variable. Whenever the measured variable value falls outside these limits, the va^ue will be ignored and 
no action is taken. 

[0220] Action log file: this field is described above, 
25 [0221] The use of a deadband in feedforward blocks is one of the features which tend to force process control into 
discrete steps, rather than continuous small changes. One advantage of this novel teaching is that full logging can be 
used: every single change made by the supervisor procedure can be logged, without generating an excessive number 
of messages. This in turn means that monitoring, diagnosis, and analysis of processes (and of process control systems) 
becomes much easier. 

30 

Block Operation 

[0222] The sequence of actions performed by a feedforward block is: 

35 - Get the current value of the measured variable (If not accessible, set status to *On -err..." and do no further actions); 

Test the value of the measured variable. If it falls outside the allowed range of values, set status to 1! On-msrd out 
of lims" and do no further actions. 

Compute the change in the value of the measured variable: 

40 

Delta measured = Measured value - Old measured value. 

If the absolute value of the change is less than the deadband, do no further actions. 
Compute the change in the manipulated variable: 

45 

Delta_manip ~ Delta measured * Proportional gain. 

Set "old measured value 3 equal to the current value of the measured variable. 
so - if block status is "On-deselected 11 , do no further actions; 

Check the magnitude of the manipulated value delta. If greater than the maximum allowed delta, set magnitude 
equal to the maximum. 

Get the current value of the manipulated variable. If not accessible, set status to "On-err " and do no further 

actions. 

ss - Compute the new value of the manipulated variable: 

New manip value = Current manip value + delta_manip. 
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If the value is outside the max/m in limits, set it equal to the nearest limit. If limited, recompute the delta using the limit. 
Change the manipulated variable value to the new value computed. If not accessible, change status to "On^err ... 
" and do no further actions. 
Load user array values for use by the user routine. 
5 - If deita_manip is not zero, update the past action values and times. 
CaH the user routine. 

Data passed to the user routine 

io [0223] The feedforward biock passes information about its actions to the user routine through the User__vars common 
block. The use of this data is described in more detail in the chapter covering User routines. In the presently preferred 
embodiment, the data passed by the feedforward block includes: 

UseMnteger(l) - the time stamp of the measured variable; 
*s UseMnteger(2) - the time the action was taken; 

User_real(1 ) - the change in the value of the manip variable; 

User_real(2) - the change in the value of the measured variabie from the last time the "old measured value" was 
updated; 

User_character(1} - = 'Feedforward'. 



20 



Sample Source Code 



[0224] The source code for the procedure which actually performs this function, in the presently preferred embodi- 
ment, is as follows. 

25 
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C 

C f EED FOftUABDJa I ock . PO* 

C 

^ C Subroutine to do feedforward calculation* on the Vax, 

C coneuni eating directly with the target ayeteii. 

C 
C 

15 C 

c 



£0 



25 



4i? 



45 



Subroutine Feedf orward^btocfc ( ft lock > 



Include p ACS8includes:Block_par©f»eterft.inc/noiist* 
1 nc t ude *A€S$incl ude a : Van^f unc t i ©na . t nc / no U s t 1 
I nc lude 1 ACSS i nc I ude* rUser^vara . i nc/noi i a t * 
I nc I ude 1 ACS$ i nc I udes : ACSata t us . t nc/no Hat' 
I nc t ude 1 AC%% i nc t udea t ACSeer v. \ nc • 
Include 'Aca&includef^Tiaerv.inc' 
Inc t ude 1 AcaS < nc I udes ; T 1 atetua * i nc 9 
1 nc I ude 1 ACSSincl ude* : Wan i p_pa raaa ♦ t nc ' 
50 Include * ACS$i ncludeasMeaajpsrans, i nc* 

C 

I n t ege r * 2 Men i p_ ve retype 

I nteger*2 Kan i p^var^num 

55 Int*ger*2 Beae^var^type 

I ntcger*2 Nea«_var_num 
lnteo.er*4 Block 
Real*4 &4ea«ured_value 
fteal*4 Currentjaanipuiated^yaLue 
Real*4 ftftew_«BenfpuLated_ value 

1 nt ag©r*4 I nteoer_Wow 

Ch«ract#r*20 Character^now 
I ntager*4 Measured^ t f me_etemp 

C 

Van_atatua * Va»*_f rota^asei i_ti»e ( * ■ t Integer_nou ) 
Ven^atatu* * Vaa$_to^asci i_time< Integer^now , Charscter^now 3 

C 

50 C..*Get the measured value 



SB 
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ACS„atatu« « ACS^getjaeaa^va retype ( itocfc , Weaa^va retype > 
ACS_»t*tu* » AC$_get j»ea«_var_/iu»i ( Block , aeas^var^nua > 

...Measured Value is TP* PCS Loop goal 

If i Steaa^va retype ,eq. PCSJT&AjLoop^eoal } Than 
ACS_atatus ■ ACS^gatjaeejoaU "TP* * * 

1 K«aa^var_nu» , Maasured^valua ) 

If C ACS_Statua »na. %tocCACS_suecssa) 3 Then 

If PCS ®oal valu* not available, don't execute 

aUock_atatu*<Bloc&0 * *On-Err-PCS goal sat 1 
tfr1ta( 6, *) *r®edbac&G exit due to oea&ured var not available* 
wHta{©,*>* ACS Stock; <, block,* ats *, Char act erenow 
fteturn 
End If 

. ,«tteaaured Value la OUT PCS loop goat 

ELaa If C Heaa_var^type ,eq. PCS_O«T_ioop_0oal ) Then 

ACS^atatua * ACS^get^pca^goal < •tmT 1 * 

1 tteas_var_aua , Maaaurad^valuo ) 

If ( ACS_Statu« .ne. %loc<AC$_aucc*aa) ) Than 

if PCS goal value not available, don»t execute 

9i ack_atatu4(B tock) * *0n*err*PCS goal gat* 
WritaC 6, *> * Feedback exit dua to ©assured var not available' 
wrtt*<6 # *)* ACS Slock; * t block # * at: ' t Charact erenow 
fteturn 
fnd If 

..Measured Value ft ACS block goal 

£lae if < 94eaa_var^type .»q. ACSJbiock_goal 5 Than 

ACS_atatu* » ACSjet^goal < 
1 ««a»_var^nLsa ( tteaaured_vaiue > 

If < ACS^Statua .n«. %loc* ACS_euceea»> > Than 

*If ACS goal value not available, don't execute 

8lock_»tstua(Slock) » »On<-£rr-ACS goal gat 1 

WMteC 6, *> 4 Feedback exit dua to »ea»ured var not available* 
write<6,*> 6 ACS ftlock: block,* at: 1 , Char act er_no* 
Return 
End If 

, ..Measured Valua la vantage variable 

Else If < aee*^var_type «eq. eur_val_Van_var ) Then 

Van^Statua * VaaSg^currenU t4eaa w var_nua , 
1 Meamured_vaiue > 

If i Van_Status .ne. XL octvss normal ) ) Than 
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10 



t If Varaibie Value not available, don't execute 

gleck w *t&tu*(&ioek> » *©n-Feiied Herd var > 

UrlteC 6, *> ■ F**dbaek exit due to aeaaured var not available* 
write<6,*>' ACS Slock; block, » at: 1 , Char act erenow 
Return 
End tf 

Vwjtfttut » Ve*59_eurtiM ( Haea^var^nuw r 
1 ttea*ured_tiH»#_ata«p ) 

C 

End If 

C 

C-»..£h«ck th* Waaeured variable to see tf It is witMn Uaite 

« c 

If C <8efc&urad_value P it* Heaauredjsi nCblock ) > .or, 

1 (Measured^ value -at- Heaauredj&axCbtoek) ) 3 Then 

C Beject the date point 

Return 
20 End ff 

C 

C.Tast to see ff th« change in th* measured value is less that the de&dband 
C 

2B Dtltfi w n«B» « Measured^ value - Otdjaeasured^vaiueC Block) 

If { Ab*< Deltajaeas ) at. 

1 Absoiute_deadband<8lock) } Then 

Return 
End If 

C 

C .special action for 'On-deselected' status * update oldj&*a*_ value & C exit. 



30 



Old^Mesured^vaiueCBiock) « fte&sured^value 
35 If { SloekjKtatu*<8leek><1j 13) .eq* *On-deaeiect*d l 3 Then 

Return 
End If 

c 

C — Value ie within limits - Compute Feedforward Response 
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SO 



Oeltajnanip * Deltajaeas * Proport §enal^gain{Btock) 

C 

C.Test Deltaje&anip to see if too great 
C 

If ( Abs(Del tejwanip) .gt. fcexjaanip^del te< Block) ) Then 

Delta^aanip * Si gn^axjaenip^del tetBt ock) ,&et tajaanip) 
End If 

C 

C.Set the current aanipuleted value 

t 

ACS^statu* * ACS^get^manip^ver^ays ( Slock # Hani p^v a retype > 
ACS_*tatus * ACS_get jaanip_var_nu» C Block f *amp_v»r_nu(A ) 

C 

C,,. Target is Tf>A PCS loop goal 
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C 

If ( Wantp^va retype *«q. PCS^TPA^Loop } Than 
ACS^atatua « ACS_get_pca_goal( *TPA * , 

5 1 Hanlp^varjfHia , Cur rent jaaM puiated^valua „ ) 

If ( ACS_Statua .ne* %lds(ACS_auec*sa) > That* 

C If PCS goal value not aval labia, don't axecute 

tUck_»tatu*e&lO£k) * *OmErr*PCS goat gat 1 
w SUtufft 

End If 

c 

Target U DMT PCS loop goal 

C 

15 Elaa If < *anfp_ver_typ* .*q. PC$^8T_loop > Tharn 

A€S_»tatu* * ACS_get_pc*_goaU •MT • t 

1 Mantp^varjiuu* f Cur rentjaanl put at ad_va I ue > 
If ( ACS^Status «ne. %toe< ACS^sueeass) ) Then 

20 C ***..!f PCS goal value not available, don't ax&cute 

Block_3t&tua(B£oek) ■ *0Jv£rr-PCS goal g»t* 
Return 
End If 

C 

C... Target is ACS block goal 
C 

EIm If < Manfp_v*r_type ,*q» ACS_bUck ) Then 
ACS^atatu* * ACS_get_jjoal < Mampjvar^nuai # 
1 Current jaanipulat ed^va I u» > 

If < ACSj?tatu« »ne, %loe<AC$_«ue<tesa) > Then 

C If ACS goal Value not available, don*t execute 

&Lock_*tatus<8lock> » '0n-Err~ACS goal get" 
iteturn 

35 * End If 

C 

C*. Target is Vantage varafble 
C 

Elae If ( N an ip_va retype ,«q. 

t V»ntage_var i able ) Then 

Van^Status » Geteuval C Manip^varjuaa # 
1 CurrantjaanipuUted^vatue ) 

If < Van^Status .n«. *lot< va»_&ycceas> ) Than 

45 C If VaraibLe Valua not available, don't eaecute 

Bloct_»tatu*(3lock) * "On*Irr-Vant var gat ■ 
fto-tum 
End If 

C 

so 

C> Target la Texas Instruments PStSSO controller aetpoint in CftO 
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C 



55 



El a* If ( < Wamp_var_typ* ,ge, loyj>*550 > .end. 
1 < Mamp_v*r_typ* ,1*. HfJ>H550 > ) Then 

If < *anip_var_type *eq. CftO^ESCHS^PHSSO JH ) Then 
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ACS_*t*tu* » Tl^jjet^loep^aetpoint C >T 1J>K$ SOJ) IMPORT « , 
1 Wan fj>_v a rju« , Gurrentja^mpuleted.jfalue > 

£U* If ( Wanip^var^type .eq. CRD„ESC»SJ»«S0J)2 ) Then 

ACS^etatua « TI„9et_loopj»*tpofnt ( »TIJ>H550J*2J>0RT' f 
1 Banip^ver^nufis , Current_Mntput«ted^v«lu* > 

Else If { Ken ip^ve retype *eq. CRBJESCHSJ^HSStMtt > Then 
ACS^statu* ^Tl^get^loep^aetpolnt { * TI„P«50 , 
1 »antpj*arjraj» , Currentjaanfpul»t»d_vatiie > 

Eti« If { 8eMp_v» retype -eq, CRDJESCKS^PBSSOJte ) Then 
Ae$_st»tUB * Tl^get^loep^setpolnt C m J*H$50J*4JP0RT* t 
1 Hanip^var^nua , Current_»*nJpulated_v&iu© > 

CU« If 7 Wenip_varjtype .eq. CRGJESC*$J>M5S0J>$ > Then 
AC$_*tetu* »~TI^et_loopj*etpotnt C m_PHS50Ji5 J>0fiT * , 
1 Hanlp^var^nua , Ctirrent^awnf paUted^value > 

Else If < Kent p_ve retype .eq. CRB_ESCH$J»«53MJI6> Then 

A€S_atatu» » TI^Bet_loop_«etpoint C «TI J*H550JJ6_P0RT 1 * 
1 Wanip^ver^nue* t Currentj&an$puU*ed_velue > 

Else If < Man ip^va retype **q* CRD_£$CH$_PK550J>7) Then 

ACS^statua o^T!_s*t_l^p^»etpolnt C »TI J»W55QJ17_P0RT • , 
1 Wenip^var^nua f currentjaanipulated^vaiue > 
End If 

If c ACS^Statua .ne. XlocCT J_«ucee88) > Then 

If PMSSO aetpoint value not available, don't execute 

SlockjatetuatBtock) » «0n-Err*Tl aetpnt set* 
WMte< 6, *) 

1 1 feedforward **ft » TI PW550 ftanip v»r not accessible, » 

Write C6, *> * ACS Block: *, block.' at: Snow_ti»e 
Return 
End If 

El a* I Other Kanip devtee type 
End If 

...Calculate ne« manipulated vet we, check to see It wlthfn limits 

tfew_&ampulated n velue * Current J*antpu la ted.jralue ♦ Dettejnanip 

!f ( NewjsenipuUted^value -fit. Kanipuleted_»a»< Block) > Then 
New jeeni pul at ed_va I ue * Nanipuletedj&ax (Block) 

Else If ( NewjaanipuUted^valu* At. Wani put eted^ainCB lock) ) Then 
*ewj*enipuUt*d_velue » ttenipulatedjafnC Block) 

End If 

Dettajaanip * Meujaantpulated^velue - CurrentJ*anipulated_value 

... Transmit the New Manipulated Value to the Btaniputated variable 

.•.Target i« TPA PCS loop goal 

tf ( Hani p^var_ type .eq. PCSJTPAJLoop > Then 
ACS^atatus * ACS^put.pes^goalC 1 TPA 1 t 
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1 Kanip^var^fHim , W»w_*anipuiat*d_vslue ) 

If C ACS^Statua .n*. XlocCA£$_succe3S) ) Then 

C,.--, If PCS goal value not aviiiabU f don't execute 

5 Bloek_tt»tua<Btock) » *On-§rr-PCS soil put' 

WMte< 6 # *> 'Feedback «xit due to failed aanip var put, 1 
Wr1te(6»*>* ACS Block: », block,' at: '* t netf_ttM 
fteturn 

,o Kftrf If 

C 

C..*T»rff«t f* IWT PCS loop goal 
c 

EUs If ( Kant p^ver^ type PCSJWTJoop > Then 

IS ACS^atatua » ACSjput^pCft Joal( *BMT • , 

1 Nantp^varjftuai , Hewjaan1pu4*ted w velue > 

If t AC$_*tatu* .ne, XtocCACS^sueceaaJ ) Than 

C, • if PCS goal value not available, don't execute 

Block *tatu*CBlock) » *On-£rr-PCS goal put* 

20 ™" ■ 

WHt*( o, *) 'Feadback exit due to faSUd aanip var put.* 
Writ»te f *)» ACS Blocks '.block,* at; \now_ttM 
Return 
End If 

25 C 

C...Taf8*t fa ACS block goal 
C 

Else If < Kanip^va retype *eq* ACSJslotk > Than 
AC$_status * ACS_put_goal ( Manf p^varjiua , 
30 1 Mewjaaaipuleted_valoe ) 

If { ACS^Statu* ,ne. XtecCACSjftuccasa) ) Than 

C * If ACS soal Value not available, don't execute 

Block_&tetua<8locfc> a *0n-£rr-AC$ goal put 1 
33 UHtec 6, *) 'Feedback exit dua to failed taanfp var put, 1 

UriteCA,*)* ACS Blocks *, block,' at: * # nou_t1iaa 
Return 
End If 

C 

40 C. . .Target ia wantaga varaible 

C 

Elae If ( Wanip_varj:ype .eq. 

1 Vantasa^var labia > Than 

Van^statua m f>ut*ug»n < Han I p_va r^nusa , 
1 Hewjaan i put at value > 

If c Van_statua .ne. XUcCvaa^auccaaa) ) Than 

C...... If varafbla Value not avaUabla, don't execute 

Btock^atatustfttock) * , On*Err-Vant var put ' 
so UHt»{ o# •) 'Feedback axit due to failed »*nip var put,* 

Wrfte<&,*>* ACS Block: *, block,* at: '.now^tiae 
Return 
End If 

C 

55 Co., Target 1a Texaa Instruments P*55Q controller aetpoint in CRD 
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Slit If C C «an1p_ver_type .ge. tow_pw5S0 ) ,and. 
1 ( Kanip_var_type .le. HiJ»K550 ) ) Then 

If ( *entp_vftr_type ,»q. Cft&_ESCH5^PH5 50JJ1 > Then 

ACS^atetus * T!j^t„l©op_*etp0*nt C m JWSOJM J>CRT' , 
1 Wenfp^var^miB , ttewjaanipuleted^value ) 

EU» If C Hanip^varjrype .*q* Cft&JESCKSJ*N550Jte > Then 
ACS_et*tui * TJ_put w loop_»etp©1nt ( m J>85SDJ>2J>ORT» , 
1 Kanfp^var^nust 4 fcew^BJ&niputatad^vfctue > 

EU« If ( H*nip_yer w typ* ,«q» CaD_E$ett$ J»H550_03 > Then 
ACS^atetue « Tl^put.Joop^aetpotnt C •!! JNt550Jtt.PCRT» , 
1 Wan{p_var_nuai , Wewjasni pu latfrd^vslue > 

Elti if ( Manfp^var^typ* .*q. CRO_gSCK$J>«55&_eA > Then 
ACS^atatus * TI^put_loop_aetpef nt ( *TI JP>$t550J>4J*08T* , 
1 Manf p^var^num , tteujranipulated^vatue > 

Else If ( ttanip_var_typ* .eq- caD„E$CH$j>M55DJ35 ) Then 
ACS^atatua * TI_pMt w Uop_aetpO«nt C • 1 1 J>K550J)5j>ORT* 
1 Kamp_v8r_msB , ttew^aranipuLsted^vslue > 

Else If ( Wanip^vftr^type .eq* C»0^esCHS^P«55D w 06) Then 

ACS^atatua « TJ_put_lo©p_»etpelnt { »T! J»«55$JJ6J»0RT* , 
1 Kent p_var_nu» y ttewj&«n* pulated_vsiu* ) 

Else If C M«nip_vftr.type .eq* CRD_ESCH$J>K550J)7) Then 

ACS^statua « Tl_put.Jo©p_*etpofnt C , TI_?t«550_07_POHT* , 
1 « an ip_va r^nuis , Kewjaanipuiated^vaiue > 
End If 

If ( ACS_Stetus .ne. %loc(Tl_auccec») > Then 

If PH550 sat point value not available, don't execute 
Blocfc_*tatu*< Block) * *On»Err*TI eetpnt put 1 
Write( 6, *) 

1 ' Feedforward e*tt - Tl «*nip var not puttable.* 

Write t6 M *) 1 ACS ©lock: '.block,' at: ^now^tiwe 
Return 
End If 

Elae I Other ttenip device type 
End If 



«,p„ioad epecfel array • for user programs to 1 09 sw?* sagas. 



Uaer_inte«er(1) 
Ueerjnt*0er(2) 
U*er_re»m> 
Ueer_reaU2> 
User eharaeterd 



* Me*sured_tiM_ateBp 

* Integer^nou 

* Deltajaanip 
a Del te_&ea* 

» 'Feedforward * 



...If Delta la nonzero, update peat actions 



If { Del t a jaeMp ,ne* 0 ) Then 
00 90 J * 5,2,-1 

Pa*t_act lon^vatue(Block r J> * Rest_actfon_vetue<Btocfc, J-1) 
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90 fratt^actUn^tlat (Block, 4) « P»8t_*ction_ti»t i 

Paat^oct lon^vaiueCB Lock, 1 > * D*lt« w »»n*p 
$ »ast_«t $oi\_ti»* (Black, 1) ■ Int»g*r_nou 

End If 

c 

C...*e*U U*<tr subprograms for this btoek 
C 

?D Call g»»r_pro8r««(aiocJt) 

Return 
End 

is Statistical Filtering Blocks 

[0225] Figure 1 2 shows a sample of a template 81 2 presented to the user by the build-supervisor procedure to define 
a statistical filtering block. In the specific example shown, the block being worked on is block number one of the 200 
available blocks 851 , 852, etc., and the various data values shown in this Figure reflect the entries which have been 
£0 made at some time to define this particular block. 

[0226] The Shewhart block provides statistical filtering of a sampled measurement using Shewhart tests. The user 
specifies an aim value {field 1222 in Figure 12) and a standard deviation (sigma) (field 1224 in Figure 12) which char- 
acterizes the normal variability in the measurement. The Shewhart tests a series of rules to determine whether the 
sequence of measurements are statistically the same as ("on aim") or different from ( K off aim") the normal variability 
with the average at the aim. After each test, the Shewhart block stores in the process database an estimate of the 
deviation from aim and a value indicating what rule was broken. 

[0227] In the presently preferred embodiment, Shewhart blocks do not allow timing options to be specified. They 
perform their tests only when a new measurement is entered into the database for the filtered variable. In the presently 
preferred embodiment, the conditions tested lor by the Shewhart block are: 

30 

Was the last point more than 3 sigma different from aim? 

Were two of the last three points more than 2 sigma different from aim in the same direction? 

[0228] Were four of the last five points more than 1 sigma different from aim in the same direction? 

35 [0229] Were the last seven points all off aim on the same side of aim? 

[0230] The rules are tested in the order shown. For the second and third rules, the test is first applied to the last two 
(or four) points in a row, then to the last three (or five) points. If any rule is violated, the process is off aim, and a 
deviation from aim is calculated by averaging the points which broke the rule. For example, if the last four points were 
outside the 1 sigma limit, the average of the four is taken as the deviation, if four of the last five points were outside 

40 the 1 sigma limits, the average of the last five points is taken. 

[0231] The basic Shewhart action can be altered by several additional parameters. A fix time interval can be specified 
(in field 1226), so that, if one of the Shewhart tests shows a rule violation, Shewhart tests will be suspended for this 
interval after the time of the sample that violated the rule. This is useful in process controf to allow control action in 
response to a rule violation to have time to move the process back to a statistically "on aim" position before taking any 

45 further actions, The range of calculated deviations can be limited, as specified by the data entered into fields 1 228 and 
1230. Screening limits can be applied to the filtered variable, so that measurements falling outside the range defined 
in fields 1232 and 1234 are ignored. 

[0232] The Shewhart" block differs from the feedback and feedforward blocks in that it requires resources outside of 
the supervisor procedure. It uses two process database variables to store its computed deviation from aim and its rule 
50 value. To configure a Shewhart block, in this sample embodiment the user must get database variables allocated and 
properly configured. Since this is usually a database system manger's function, the details are not covered here. 
[0233] Specifying a "Shewhart" (La statistical filtering) block on the block setup selection form {Figure 9) brings up 
the Shewhart block setup form shown in Figure 12. 

55 Parameters 

[0234] The parameters shown on this form include: 

[0235] Filtered variable type: a number code representing the software system and the type of entity which the block 
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should use for the filtered variable. 

[0236] Filtered variable number: the number of the entity within the specified system which the block will use for the 
filtered variable. For example, if the filtered variable type is a historical database variable, the filtered variable number 
is the number of the variable in the historical database. After the filtered variable type is entered, the label next to this 
s field will show what type of data is needed. When the filtered variable number is entered, other fields win also be filled 
in: the name and units for the filtered variable, aim, and sigma; units and default values for the max and min filtered 
values. Since Shewhart block timing always keys off entry of new data Into the filtered variable, only discretely sampled 
variable types can be used, 

[0237] Deviation variable type: a number code representing the software system and the type of entity into which 

10 the block should store the computed value of deviation from aim. 

[0238] Deviation variable number: the number of the entity within the specified system into the block will store the 
computed deviation from aim. For example, if the deviation variable type is a historical database variable, the deviation 
variable number is the number of the variable in the historical database. After the deviation variable type is entered, 
the label next to this field will show what type of data is needed. When the deviation variable number is entered, other 

is information will be automatically filled in by the build-supervisor procedure; in the example of Figure 12, region 1236 
indicates the pre-siored designation of historical database variable 2084. Such automatically completed information 
will preferably include the name and units for the deviation variable; units and default values for the max and min 
'"■ deviation values. Since Shewhart blocks execute on entry of new data into the filtered variable, only discretely stored 
deviation variable types can be used. 

20 [0239] Rule variable type: a number code representing the software system and the type of entity into which the 
block should store a number code indicating which rule was broken. 

[0240] Rule variable number: the number of the entity within the specified system into the block will store a number 
code indicating which rule was broken. For example, if the rule variable type is a historical database variable, the rule 
variable number is the number of the variable in the historical database. After the rule variable type is entered, the 
ss label next to this field will show what type of data is needed. When the rule variable number is entered, the name and 
units for the rule variable will also be filled in. Since Shewhart blocks execute on entry of new data into the filtered 
variable, only discretely stored rule variable types can be used, 
[0241] Aim: the "on aim" value of the filtered variable. 

[0242] Sigma: the standard deviation of the value of the filtered variable when the measurement is "on arm". 

so [0243] Fix time; A time interval after rule violations during which no rule tests are done. New measurements entered 
during the fix time interval are ignored. The fix time is entered as a delta time character string: "ddd hh:mm:ss" where 
"ddd 11 is the number of days, "hh" is the number of hours, "mm" is the number of minutes, and "ss" is the number of 
seconds. The fix time is taken from the trmestamp of the filtered variable value which caused the deviation to be 
identified. The timestamp of later samples is compared against this, and if the difference Is less than the fix time interval 

3s the sample is ignored. 

[0244] Switch system and switch number; these are described above. 

[0245] Minimum and maximum value of the calculated deviation: iimits on the allowed value of the calculated devi- 
ation from aim. Deviations outside this range are set equal to the closest limit. 

[0246] Minimum and maximum value of filtered variable: Screening limits for reasonable values of the filtered variable. 
40 Any time the filtered variable value falls outside these limits, the vaiue will be ignored and no action is taken. 
[0247] Action log file: this field is described above. 

Block Operation 

45 [0248] In the presently preferred embodiment, the sequence of actions performed by the Shewhart block is: 
If the block status is "On-deselected", do no further calculations. 

Retrieve the last 7 values of the filtered variable. If not available, do no further calculations. 
Check the last value of the filtered variable. If it is outside the allowed limits, do no further calculations. 
so - Search backward through the stored values of the deviation variable for the most recent non-zero value. If a non- 
zero value is found within one fix time interval before the present instant, do no further calculations. 
Compute the cutoff time ~ time of last non-zero deviation plus the fix time, 
initialize the deviation and rule values (to zero). 
Begin testing Shewhart rules: 

ss 

* If the last point is older than the cutoff time, do no further calculations. 

* If the last point is outside the 3 sigma limits ( L_e. Abs(point-aim) is greater than 3 sigma), then: 
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Deviation = Last point - aim 

Rule = 1 
5 Skip remaining rules. 

* If the second newest point Is oider than the cutoff time, Skip remaining rules. 

* If the last 2 points are both either greater than aim + 2 sigma or less than aim 

10 - 2 sigma, then: 

Deviation = Sum (last 2 points )/2 - Aim 

is Rule = 3 

Skip remaining rules, 

* If 2 out of the last 3 points are both either greater than aim +» 2 sigma or less than aim - 2 sigma, then: 

Deviation = Sum(last 3 points)/3 - Aim 



20 



Rule = 3 

Skip remaining rates. 

2S * if the last 4 points are all either greater than aim + sigma or less than aim - sigma> then: 

Deviation = Sum(last 4 points)/4 - Aim 

30 Ruie - 5 

Skip remaining rules. 

If 4 of the last 5 points are all either greater than aim + sigma or less than aim - sigma, then: 



35 



40 



SS 



Deviation = 3urn(last 5 points)/5 - Aim 

Rule = 5 

Skip remaining rules. 

If ail of the last 7 points are greater than aim or all less than aim, then: 

Deviation = Surn(iast 7 point)/7 - Aim 



Rule = 7 

4S Skip remaining rules. 

Check and store result: 

* If the deviation is outside the allowable limits, set equal to the closest limit. 
50 * Store the deviation value and rule value in the respective variables. These values are time stamped the same 

as the last filtered value. 

If the deviation is non-zero, update past actions. 
Call the user routine. 



[0249] Of course, other statistical filtering methods couid be used instead. It is generally realized that statistical 
filtering is highly advantageous, and that numerous algorithms can be used to accomplish statistical filteringThe Sh- 
ewhart algorithm used in the presently preferred embodiment couid be replaced by any of a wide variety of other known 
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algorithms. 



Sample Source Code 



$ 



[0250] The source code for the procedure which actually performs this function, in the presently preferred embodi- 
ment, is as follows. 



10 



15 



c 
c 
c 
c 



Shewhsrt block. for 



C 



C 



C 



20 



Subroutine Shewhart block ( Block) 



t 



Include 'ACSSf nctudes:Block_j»&rameters* i nc/ no Ust 1 
I nc lude 1 acs$ \ nc I udes : ACS&erv , i nc/nol i at * 
Include ' accSi nc I udes rACSstatuis . \ nc/nol i st 1 
Include 1 ACS$ includes :Van_f unctions* i nc/nol ist* 
Include *ACS$includes:Fi I ter^params, tnc/noU»t» 
Inc lude * ACSS includes :dev_pa rams . i nc/nol i st 1 
! nc lude 1 ACS$* nc I udes: rul e^parsfas, i nc/nol ist 1 
1 nc I ude 1 ACS* i nc I udes :User_v»r ft . i nc ■ 

integer** Stock 
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SO 
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Integer 




Error^lun 


Mrmt*r 




< Error_tun * a 5 


Character* 


20 




Character* 


20 




lnteger+2 




FHt*red_vaHabU 


lftt»9«r*2 




Bevfatfan^veriabLe 


Int»»ar*2 




Hula^variabU 


lntegtr*2 




f U tered_vftHable_type 


tntagar*2 




0 av f at i on^var 1 ab U_t y^a 


Intager*2 




31 u L a jvar i ab I »_t ypa 


Ir»t*9*r*4 




1 4_dev1 at 1 on_var 1 abi a 


lnteger+4 




U_ru U^var labia 


Ra*l*4 




Aim 


ftaal*4 




Sigma 


Ir*t»9*r*4 




1 ntager_f 1 x^t 1»a 


Int«ger*4 




Cutoff_tioe 


Intager*4 




Safejtiae 


a*»l*4 




^aviation 


«eal*4 




ftule 


*eal*4 




L aa t_f t Itar *d_va I ua 


Logical 




At l w Baaa_ft?gn 


Logical 




Head^violetlan 


Jntager*4 




Nu«j>otnt« 


f>ara»ater 




C*um_pofnta ■* 7> 


Reat*4 




P o i n t < Muofcj>o i nt a > 


lfiteaer*4 




T Imea < Hum^poi n£a) 


Character^ia 


Cha p^t \ »ea< NuM_po i n t a ) 


intagar*4 




Kum_potnte1 


Parameter 




<«um_po*nta1 « 8) 


ft as 1*4 




Point 1 (NuK^pomtsI > 


1nteger*4 




T f anas 1 <«um_point«1 > 


Cheracter*l8 


Char^t 1 weal CNumjaoi ma 1 ) 


«eat*4 




V{0iatton_value(1> 


lnteger*4 




violet Un^timect) 


lnteg«r*4 




Hewftatjtlw* 


lnteger*4 




Otd®at_t ima 


lnteger*4 




Bijf * ar_siza 


Logical*! 




f irst^raquast 


Intagar*4 




Blocte^Ucation 


lnteger*4 




Entry_count 


lntefttr+4 




8egfnj*pan_$tatu* 


fiyte 




lntarp_f tags 


lnt*g*r*4 




geginjtpari^tine 


Integ*r*4 




End_epan_time 


!nteger*4 




wum_po 1 nta^rat r < eved 


!nt«g*r*4 




lntag*r_No* 


Int*ger*2 




Start_point 



.Special case *or »0n-deseieetad • status 
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If < st©ek_*tatua(Block)C1: 13) *»q. 'On^daaalactad* > Hi en 

ieturn 
End If 

Ct.Set the v«lu« of th« local variable* 
C 

ACS^a tatua * ACS^aet^f I i tered^ver_type( ft t ock , f U ter ad.jfar i afo t e^type ) 
M Uered^vaHable * Mfte*ured_v«rieb let Block) 
™ Ats^atetua » A C S_g a t ^dev^va ype < Stock p devfet ionjfaHabU.type ) 

pavfetion^varlabU » Wan ipul&t«d_veriabl*CB lock) 

ACBjBtatua * ACS^sat^ruU^var^type < Black , rul»_vari abL*_type ) 
Rule_vaHable » Hewja«ntpwUted_v«Hable<;&l©cfc) 
Mm * GeaUBloek) 
Sigma » Abaolute.dft&dbendc Block} 
lrtt«9«r w f fx.tfM * Ff*_tf»*tBtoek) 



75 



Van^etetua * VaaS^f roeft_aacn_tltt« ( 1 * t Jntaaar^now > 
ZQ Ven_*tatufi « vaaSj^ascH^Mae i Jnteser^now f now_tiraa > 

d Vanuatu* * Va*$_to_a*cH_tf m < mteser./iow # StorejHae ) 

d write{6,202> ■ Calling Shewhert on var » f f f I tered^variabU, • at » , 

d 1 Stora^tima 

d 202 formate//,*, » »,*5,* *,a> 

25 C 

C... Retrieve enough points to test all the rule* 
C 

If ( Ft I tered^verf eble_type .eq* Ven_var_f U tor ) Then 



30 



35 



ttewe*t_time * tnteser_no« 

Otde*t_time » ifawaat^tiise - 365*24*60*60 

Buff arjtia* » «umj>ointa 

F 1 rat^request * .True. 

*u«j»ointe_r»tM#v*d ■ 0 

Start^potnt * t 



Do 777 j « 1 f B«uft_potnts 
Tinaa(j) ■ 0 
40 777 Potnttj) « 0.0 



C 



45 



vanjttatus * xioc<v»6_ey*t«»down) 

Do While < CVan^atatue ,eq. %ioc<vBB M 8y*t*8»down)) »or. 
t (Ven^etatua *aq» %loc< vae^unavai Idata) ) ) 



50 



Ven^atatua * VeaBJfcetrieve C FH tered^var table , wewcst^tii 
1 Oideatjtioe ( Suff*r_«Ue , ti»a»Cat»rt_point > r 

1 f>o*nt<Start,j>oint) , 

1 F 5 rat^reque&t , EL ock_locst ion , Entry_count , 

1 Sep ?njM»an w * tatua , Interpol egg , Bepin^apan^t ime , 

1 £nd_*pen_ti»e ) 

Mum^peinta^retrf eved * Nuw>j»ol nta^ratrtavad ♦ Entry^count 
If ( Nuw^pointe^retrteved -It, »u»j&oint« ) than 
S$ Buffer^aiie * Buffer^aize - Kum^pointe^retr ieved 

Start point * Start point + Entry count 
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fcnd If 

d wrftaCo,*) 'Finiahad data retr,* 

c 

End Do 

c 

d do 11 4 «1,ttua_p0int8 

d 11 Van^atatua » Va»*^to_asef i^tiaw C Tima( j) , Chor^ti»*a( j ) > 
d «rfte{o,12) (Char_tf*m<j>,£otnt<J> JM,nwi joints) 

d 12 FornatC /,' »«r« ara th* tfoaa and points: 1 ,// 
d 1 <' Mia,« \M2.4 P / > ) 

d writeCA,*) 1 Got * t a^« - j»ointa_retM*vod t * point*. ' 

If < »u«_pofnta_r«tHeved «lt. «u«_point* > than 

MrltoCfrror_Lun t *> 
1 *Sh«ahart Fa Had to gat anoufh data on Var fab I a * t 
1 Filtered_variabla 

wrl teCarrorJun^'fro® ACS blocks * ,block, * at : * , now^t i mm 
VMt*<£rror^lun,*) 'wanted ^umjaolnts, «; Cot *, 
1 NumjKi i n t a„r a t H a ved 

Return 
End If 

d wMte<6,*) 'Got enough pointa.* 

C 

C 

C Check the Heasured variable to see If It fa within t trait* 

C 

Laat^f f Itered^vetue » Pofnt(l) 

If < CLeat^f Utered_vatue *lt, fte*»uredj»in< block) > .or. 
1 (laat^f tl tarad^valua ♦at. Meaauredj*ax( block) > ) Than 

C Reject the data point 

WrftaC 6, ») *She*hart axit due to out of H«t* filtered. ' 

wrfteC6,*)» ACS Stocks block,* its *,now_time 

Return 
End if 

ELma if C F It tered^vari ablest ype ,*q. ven_runJ2_f liter > Then 

c 

K«w*st_tin* ■ intager^now 

DLdeat_ti»e « *ew«st_tlR* • 365*24*o0*6Q 

Buff«r_aixa * *um_pointa1 

First^raquast ■ .Trua. 

Nua^pointa^ratHeved * 0 

Startup©* nt * 1 

C 

Do 1777 j » 1,Muajsoints1 
TiaeaKj) « 0 
1777 PotntMJ) « 0.0 

C 

Ven_*t«tus * %locCv**_ayat&ftdoun) 

Do VhU* < (Ven^status .eq. Xioc( vat_aystemdo«n>) .or. 
1 (Van^atatu* .*q* tlocCvas^unavai Idata) > ) 

c 

Van_atatus » Vss$_ft*tr ieve < M Ltered_var table , Mewest^time , 
1 Qtdest^tim* t &uffer_aixe , Tima*Kstart_point ) , 
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% PointUStert^polnt) * 

1 Fir«t_requett , llock^locat ion , grit recount , 

\ &*(fin_*pan_itiituft , Jnterp_flegs , Sag in_spen_t i»e , 

1 End_«pan_ti»>e > 

tausaj^ointa^retrUved * «u« w pof nU_retH«v*d ♦ 6ntry_count 
If C *u«_point#_retrUv*d At, Mua,j>otnte1 ) then 

8uff*r_a1z» « luffer^aixe * Nu» w po $ nt e^ra t r i eved 
Stertjpofnt * Start^polnt * l«try_caunt 
End If 

d wHtete,*) 'Flniahsd data retr.* 

End Do 

c 

75 d do 111 J »1,**U*J«>tFtt*1 - 

d 111 van^stetu* * v*«S_to_*»cH^ti»* C Tft**»1<j> * Char^t issesl < j ) > 
d wHte(6,112) cch*r_tite«*1{ j),Pofnt1<i>, j«l ,nui*_points1 > 

d 112 ForwatC /,* Were are the tfiae* and point*: 1 ,// 
d 1 C* Mli,' , / > > 

d wrtte<&,*> 1 6ot » ,Wutft_point8_re«ri*ved, ■ point*, * 

If < «um_point ^retrieved .It. Nuia^pointsl ) then 

Wrlte{Error^tun,*> 
1 'Shewhsrt Failed to get enough data on Variable 
1 Fi lter*d_var table 

wH teterror^lun,*) ' f rom ACS bl cck , block f ■ at ; 1 4 nou_t ime 
WriteCError^tun,*) 'Wanted 1 , Wumj>oint*1 t * ; Cot 
1 ttu»_point*_ret r ieved 

Return 

30 E "<* l# 

d write<6,») 'Cot anoujjh points.* 

C 

C 

C.*» .Check the Heaaured variable to ae* H it i« within limit* 

35 C 

Le*t_f 1 lter*d_v*iue * {Point U 1 >+t>ofnt1<2> >/2- 
If i (Last_.fi Iter ed^value .it, t**a*ur*d_*>ine block) ) *or, 
1 <tast_f i Itered^vaiue *gt. Heafcured_»ax(block-) > ) Then 

C. ... Reject the data point 
40 WriteC 6, *> 'Shewhart exit due to out of Ifmts filtered. 1 

*Mte<6,*)' ACS Block: block,* at: < t now_tiaie 
Return 
End If 



20 



2B 



4S 



SO 



Do i » 1 c nua»_point* I rwnnine average 

polntcj) ■ <potnt1< j>+point1< j+1>>/2 

TiaesCj) « timesKj) 
end do 



Else l lnprop«r filtered type 

Vrite< 6, *) 'Shewhart exit due to invalid filtered var type.* 

wMt*(6,*>» ACS Slock: *, block, 1 at: * t now_time 

fceturn 

55 End if f Filtered types 
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10 



15 



20 



25 



$0 



35 



40 



c 

c 

c. 

c 

c 

c. 

c 



..Check to **ft H the Last violation aai within tha Fix tia 
If so, do no calculation*. 

.Retrieve th* last stored nonzero deviation fro* ala 

If < gtevletf on^vaHabie.Jtypa .eq* Van^varjiev ) Than 

tt«Mest M t1»« * integer jiow 

Oidest_ti»* » wewestjtiia* - 565*2**60*60 

&uffer_aixe « t 

Firat_requ*st * .True, 

»*ed_v«olation * Jru*, 

Oo While ( Nacd^vfotatfon > 



Van^statu* « V*&*_Retrieve ( &ev1ationjvar1&ble , &Jewest_time t 
Oldeat_titae , Bwffef- W itze , Vfolat ion^tiae , 

Violatf on_vatu* , 
fi rst_request ( aiock_J ocat 1 on , fintry_count # 
B*gin_*pan_itatu& , Interp^flags ( sag i nj&pan^t \ me , 
End_spen_ti»e > 

f ( ( van^stetu* ,ne. 3Uoc( vss^tyateaidown) > *and* 
( Ven_status ,ne, 5Cloc( vsa^unavai Idat a) ) ,and, 
( Van_stetus .ne. XL oc< vss^net alt found) ) 5 Then 

Write**,*) 1 Shewhart Violation retr - statu* vss_badvarnu^l , 
write(o,*>* ACS Block: \btock # * at: *,now^tiwe 

Els* !f( Van^status .eq. %toc{ Vss_badt tme) } then 

Writa(6,*)* Shewhar? Violation retr - statu* vss^badt im* ' 
wrtte(6,*>* ACS Slock: '.block,* at: *,now„.tirce 

EUe IfC Ven^atatus »eq* %tot{Vsa_bedt imespan) > than 

WrfteCd,*) 1 Shewhart Violation retr * status vss_badt imespan 1 
writer,*) 1 ACS Slock: \biock,* at: <,now_tiree 

EUe If< Vanjttatu* .eq. XlocCVtsJaadbuf »i ze> ) then 

WriteC6,*)< Shewhart violation ratr - statu* vss_>adbuf si ze* 
wrlt©c6.*)* ACS stock; block,* at: *,now_t1fte 
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Else tf< Vanjitatus . eq* % I ocCVs abnormal > ) then 

Writ*c6,*)* Shewhart Violation retr - statu* vss_ncrmat ■ 
writeU,*)* ACS Slocks block,* at: ',now^tin>e 

Else Hi Ven_status .eq. XI oe<Vse_none found} ) then 

write(£,*)« Shewhart Violation retr * status vss_none found' 
write{6,*)* ACS Slock: '.block.* at: «,now_tirce 

Else lf( Van_status *eq. %i oe<V*B^nofiw>reont i ne) ) then 

tfrite<6,*)* Shewhart Violation retr - status vss r*omor«online ! 
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write<o\*)* ACS Stock: *, block,* at: *,now_tia* 
End If 

WRit«<6,*> 1 Van_atetus « • J V*n^*t*ty* 

Ven_»tatu* • VaaS^to^ascH^tlaw* ( VI otation^t i**e( 1 ) , Stort^tifaa ) 

Uri te<Error^tun,*> 
I *$hewhart"Couldn* • t aet e non z*ro deviation * exiting' 

wMttio,*** ACS 6 L ock : '.Mock, 1 ets Snow^ttsa* 

Uri te(Error_lun,*) 
1 » Oldest violation sot: • # Violet fon_vaiue<1>, * *t S^torv.tlM 

Return 
End If 

If C < Abs<YioUtfon_valu»m> .»t. 1.0 E-10 ) .or. 
1 C VioUtion_tta*n> At* 

1 <Ti»e*<r) * Aba* Inteser^f ix.j:ia» )>) ) Then 

8«ed_viol*tion * .False, 
End If " 

End Do 

Else J Improper deviation ver type 

Urite( 6, *) »Shewh»rt exit due to invalid deviation var type. 1 

wHt*<6,*>* ACS Block: block,' att ^now^tiase 

Return 

End If I Get last deviation for allowed deviation type* 



Vanuatu* « v*sS_to_6*ci t_t late ( violation_ti»e(1 > , store^time > 
write<©«*> > Got a violation of 1 ,Violat fon_v»lu*M >, * at 
1 St creatine 

„.*Go through the ahewhart Rule*- * any point older than the laat violation 
time ♦ the fix time is not acceptable. 

Cutoff_tine » Viotat ion^tieed ) * Abc{ tnteaer^f ix_t?»e> 
Van^statua « Vaci^to^aaci i^t ime ( Cutoff_tiree „ Store_tiroe ) 
«rite<6,*) * Cutoff time U l , Store^tiaa 

Deviation « 0.0 
Rule » 0*0 

If ( Tiawid) .It. Cutoff_ti*e > Return 

wri te<«rror^tun,*> 'Testing 1 out of 1 rule. 1 

If ( Ab*<PointO)-Alm) .at. 3*Si9*e > Than 

Deviation «« l»oint<1) * Ala 

Rule * 1.0 

Co To 1000 
End if 

.Test Z in & row outside 2 aioma 

If C TimesCZ) At. Cutoff^time > Co To 1000 . 
wHteCerror^tun,*) *Te*tina 2 out of 2 rule. 1 
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t*tf»_out^high * 0 
ttu» w out_.low ■ 0 
Do 2 4 • 1,2 

5ua_po1nt» ■ $uaj>offtt* ♦ PointtJ) 
If i (PofntU>"Aiao .*t. 2*$tflBw > Th*n 

Nua_out_high • Kua^outjitgh +1 
EUft tf < CPointCJ>-Aia> at. -»2»SfgM > Than 

End tf 
Cone fruit 

If ( ( ttua^outjilgh .*q* 2 > .or* 

1 ( Nu«_oiJt_lofcf 2 ) > Th*n 

Dovfotion * Su»_pointa/2 - Ate* 

aula • 3.0 

fio TO 1000 
Snci If 

•T&ftt 2 out of 3 outaido of 2 Ms&ta 

If ( Titt*«<3> .It. Cutoff^tiw* ) So To 1000 
wri t«C«rror_lun,*) 'Testing 2 out of 3 ruU* 1 
Sufftjtoirtts • Suajiolnta * ?oint<3) 
If < <Pofnm>-A*«) .gt* 2*Sig»* > Th*n 

»u*_autjilgh * Nua_out,Ji1 ffft 
Elte If ( <Poiftt(3>*Ai»> at* -X'Siain* ) Th*n 

i*ua_out_low » Mun^out^LoM + 1 
End If 

If ( I Buaa^outjif ,aq. 2 ) .or, 

1 ( Nu»_out M low **q, 2 > > Then 

O&vfatton * Su»_pointft/3 - Skim 

&ul* « 3,0 

SO To 1000 
£nd If 

♦ Test 4 in a rou outatde 1 sfgaa 

If < Ti»«a(0 .It, Cutoff_tito« ) Go To 1000 
writ»<«rror^lur\,»> *T«st?ng * out of 4 ruUa 
Suajwf nts * 0*0 
ttua a .out_M gli * 0 
Nuai^out^toM m 0 
Do 3 J * 1,4 

Standpoints « Su»_points + PdntU) 

If < <Point(J>-Alm> *«t- 1«S1g»a ) Than 

Nun H out_tii0fc * Num^outjifgh *1 
El*e If { <Petm<J>-At8i> at, -1*$igffla > TM>n 

NUffi^out^low » Numjaut^iow * 1 
End tf 
Contfmio 

If < C Kufft_out_Mo,h *eq, 4 ) .or* 

1 { *ium_out_Uw .*q. 4 > ) Th*n 
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10 



15 



SO 



Oevtation » $um_pointe/4 * Aia 
ftule » $.0 
GO TO 1000 
End If 

C 

C.-.Tect 4 out of 5 outside 1 BisMsa 
C 

If ( T*a*»<5> .It. Cutoff_tf»* ) Go To 1000 
d art t*<*rror_lun«*> *Te*ting 4 out of 5 rulo.* 

$i«aj>o1rtt* m $ua w paint* + Point<5> 
If C <?o1nti5)~AfR> *gt. 1*Sio«« ) Than 

&t»_out_h i oh * HuwjttJt^hiQh +1 
Else if C CI>oSm<5>-A?«) .It* ~1*Si»*« ) Thon 

«u«_ou?^lo« « Uu» w ouf M tou * 1 
End If 

If < < Mu»_out_hi9h »«q» 4 > .or. 
1 ( ttuiR_out_iow *eq. 4 > ) Then 

Deviation * Sumjjoi ntft/5 - Aim 
Rule * 5.0 

go to iooo 

End If 

C 

25 C*..Te*t 7 in * row * &ame Bide of »i« 

C 

!f ( Tim»s(7> .It, Cutoff_ti*» ) Co To 1000 
d writeCerror^lun,*) 'Test ins 7 in * row rule.' 

$utaj>alnt» ■ 0*0 

30 si ©^deviation * SlflnC 1 .0, t Af»-PointCl )> > 

If ( <Aia*Point<1)> .ne. 0> Then 
A 1 1 jsomeji i en * *T rue . 

eltt 

AU^seeBe^sign * *fals«. 
35 End tf " 

Do 4 J » 1,7 

If < <Aiw-PolntCJ>) „*o,. 0) Then 

AU_*om«^»ifln ■ *F*lfi». 
EUe If { $1gn< 1 . 0 , <Ai»-Pof nt< J > ) ) .ne* Sign^devietion ) Then 

Ati_seme w tign ■ .Felse. 
End H 

4 $ufe_pointft « $um_point* * PointU) 

45 If C AH^*»»e^*^n ) then 

Deviation » $urcjooint»/7 - A in 
Rule « 7*0 
Go To 1000 
End If 

50 C 

1000 Continue 
d writeCo,*) 'Got deviation, rule of * ,tievi»t ion, rule 

C 

C., r CLamp the deletion *t allowed limits 

SB c 
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if C Deviation 4 Qt. Man! puLat*d_«*x£8 lock) ) Then 

Deviation * Hani pulat*d_»ax< Block) 
EUe If t Deviation .It. «an i pu I at ad jMn< a lock) ) Then 

Deviation * Want pul ated_a1n(a lock) 
End If 

C 

C... Store the Co&putad Deviation and Rule mwbtr with Ttttestasip 



C 

d VenjHatus « Va s$Jt o_a*c H _t i »>e X TiMaO) a starejtiaa > 

d wHtete,*) 'putting vmr * , U^devtatf onjvar table, * at * ^tora^tlme, 

d 1* with value *, deviation 



c 

If < D*v$at$onj*arfable w type -eq. Van^var^dav ) Than 
1 4_dev t at I en_var labia * Deviat i on.vaM able 

D»t w statu» - 0j»t*_putlab ( U^davlatlon^vaHabla , TiaesM> , 

1 Deviation t 2 , »Fala«, ) 

Etta f Other deviation types 
End tf I Daviat ton types 

c 

d writ(se<6 t *) * Did put lobs* -first status « ♦ , diat^status 

d wHt*(6,*> *puttina ver 4 , U_rutej/ar table, 1 at * # atorejH»e # 

d 1' with value • ,rul* 

e 

If < ft ule^varf able_ty pa .*q. Van_var_ruta ) Than 
14 jr ule^var table » rut e^vari able 

D»t_atatus » 0mt*_puttab < U_rul*_vari able , T1a»e*(1) , 

1 aula , 2 , -False. > 

Else f Othar rule typaa 
End If ! Rule typaa 

c 

e atatua ■ vsaSjaahsloseO I close file juat in case 

c 

d writ*<6,*> • Did putlabs -second atatua ■ » , dmt_atatus 

d »*Hta<6,*) * Did putt aba -exiting* 

C 

C*.*If Deviation is nonzero, update past actions 
C 

If < Deviation .ne. 0 > Then 
Do 90 J » 5,2,-1 

Past^act ion_valu<K3l ock, J) ■ P«t M act i on_valua(Bioctc, J- 1 > 
90 Psst_action_t iste (Slock, J) • Paat_act ion^t imm t8lock,4-1> 

Psst_action_vatue< Block, 1) * Deviation 
Pes traction., time {stock,!} * TinesC1> 
End If 

C 

C»**Load u&er arrays for user programs 
C 

U»er^1nte9ar(1 ) « Integer^noy t Time of Testa 

User_f nt*ger(2) * Rule 

User_real(1) « Deviation 

Do J ■ 1 , Max < Num^points , IB ) 

Uaer_inta9*r( 2*J) » TimesU) t Time of samples used in tests 
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U»er_r»*L (2+J) * Potnt(J) t Value of aasiptea used in test 
End Do 

If ( Rule 0.0 > Then 

5 

Uaer^eharacterU) * 'On aim, Ho rule* broken 1 
Ua*r_eharecterC2> « *On aim, rule* broken. 1 
lift 2f C *ule .eq* 1.0 > Then 

U*er w ch*rectern> * 'Shewhert % out of 1 rult 1 
70 U**r_cherecterC2> * 'Shoe heart 1 out of 1 rule' 

£U* Jf ( fcule *eq. 3*0 ) Then 

U«#r.ch»r«ttr(1> • *$hewhart 2 out of 3 rut** 
Uaer_eh*reeter(2) » ■Shoe heart i out of 3 rut* 1 
15 £l*e If ( &ule .eq. 5.0 ) Than 

U»»r_character (1) * f Shewhart 4 out of 5 rule 8 
tiaer_charaeter(2) * *Shoe heart 4 out of 5 rule 1 
£l»e If ( ftule .eq. 7.0 ) Then 

ueer^cftaracterd) ■ *$hewhart 7 in e row rule* 
Ueer_charecter<2) * *Shoe heart 7 In a row rule 1 
End If 

t 

£...€& Li Ueer routine 

C 

Call Ueer^program* ( Slock ) 

Return 

End 

30 

User-Defined Program Block 

[0251] Figure 13 shows the form which {In the presently preferred embodiment) is presented to a user who has 

35 chosen the "User program* option from the menu shown in Figure 9, 

[0252] The user program block provides a means ot controlling the execution of a user written FORTRAN subroutine. 
The block itself performs no control actions, but allows the user to specify a timing option and switch parameters for 
executing the block's user routine. A user routine exists for every block in the supervisor procedure. {In the example 
shown in Figure 13, where the block shown is block number 2, the block will (selectively) make cails to 

40 BLOCK2JJSERJ^OUTiNE T ) Initially these routines (BLOCK1„USER„ROUT]NE r BLOC K2_US E R_RO UTI N E } 
BLOCK3JJSER_ROLfTINE ? etc.) do nothing (Le., their default content is merely the FORTRAN statements Return 
and End), but they can be modified by the user. The user program block only sets up parameters for controlling execution 
of the user program. 

[0253] The user program timing options include keying off a measured variable. In this case the variable is not used 
45 for anything but timing, This option can be altered by specifying screening limits on the measured variable value (using 
fields 1332 and 1334), so that measured values outside the screening limits are ignored. Block timing and switching 
and the bbek description fields follow the general outlines given above. 



20 



25 



SO 



Parameters 



[02S4] The parameters are: 

[0255] Measured variable type; a number code representing the software system and the type of entity which the 
block should use for the- measured variable. 

[0256] Measured variable number: the number of the entity within the specified system which the bbek will use for 
the measured variable. For example, if the measured variable type is a historical database variable, the measured 
variable number is the number of the variable in the historical database. After the measured variable type is entered, 
the label next to this field will show what type of data is needed. When the measured variable number is entered, other 
fields will also be filled in: the name and units for the measured variable; units and default values for the max and min 
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measured values. 

[0257] Timing option, execution time interval, and Key block number: these parameters are described above. 
[0258] Switch system and switch number: these are described above. 

[0269] Minimum and maximum value of measured variable: These define screening limits for reasonable values of 
$ the measured variable. Whenever the measured variable value falls outside these limits, the value will be ignored and 
no action is taken. 

[0260] Action log file: this field is described above. 
Program Block Operation 

10 

[0261] The sequence of actions performed by a User program block is: 
If block status is "On -deselected", do not execute the user routine- 
rs ~ if a measured variable is specified: 

* Get the current vaiue of the measured variable (if not accessible, set status to "On-err..," and do not execute 
the user routine). 

* Test the value of the measured variable. If it outside the range of allowed values, set status to "On-msrd out 
£0 of iims" and do not execute the user routine. 

Execute the user routine. The routine name is derived from the block number Block 1 calls Block1_user_routtne, 
block 199 calls Bfock-199_user_routine, etc. 

If a fatal error occurs in the user routine, bypass the rest of the routine, and set the block status to "On-Failed usr 
25 routing 

If the block failed on the last execution, but did not tail on this execution, set the block status to "On". 
Clear all the values in the userj/ars common block. 

Buiid-User-Program Procedu re 

30 

[0262] The build-supervisor procedure (in the presently preferred embodiment) also provides a structured environ- 
ment for creating user programs. As will be described below, the build-expert procedure wilt create the source code 
for one or more customized expert systems; but the user must still insert a call to this expert code into one of the blocks 
in the supervisor procedure. The build-user-program procedure facilitates this, and also provides convenient support 

35 for sophisticated users who are abie to write their own utilities. 

[0263] In the presently preferred embodiment, this is a structured environment in which users can write FORTRAN 
subroutines and incorporate them into control blocks. User programs can be run as the only block function by defining 
a User Program block (as described above), or they can be used to take additional actions (such as message logging) 
in combination with feedback or feedforward control blocks. 

40 [0264] At a minimum, a user with no programming knowledge can insert a one-line call into a user program block, 
to make use of an expert subprocedure created using the build-expert procedure. However, to take full advantage of 
the capability for user programming, the user should (in the presently preferred embodiment) already be comfortable 
programming in FORTRAN and using FORTRAN functions and subroutines, and in using the Vax EDT editor. The 
build-user-program environment 1810 in this embodiment is menu driven rather than forms driven, and therefore pro- 

4S vides less online help than some of the other functions described. 
[0265] Writing a basic user program involves 5 steps: 

Selecting which block number's user program to edit; 

Editing the file which contains the user program code for the block. The EDT editor 1812 is used to write and 
so modify the FORTRAN language code; 

Checking the code for errors in FORTRAN syntax; 

Updating the supervisor procedure by incorporating the latest version of the user program into the base cycle 
procedure and running the new base cycle procedure; and 

Monitoring user program execution to assure that the program is executing properly, 

55 

[0266] In the example shown in Figure 16, the top level build-supervisor menu permits the user to enter the build- 
user-program environment by pressing keypad 5. While in the build-user-program environment, the user can edrt the 
block user routine; check the block user routine for errors in FORTRAN syntax; and update the supervisor procedure 



64 



EP0 335 957 B1 



by incorporating the new version of the block user routine. The first prompt from the user program menu asks what 
block number's routine the user wants to work on. Entering the block number and pressing return brings up another 
program menu, with options which will now be described. 

[0267] Editing the user routine begins by selecting menu option 1 ("Edit user routine"). This will start the EDT editor. 
User routines of some sort already exist tor ail the blocks. Blocks which have never had any special programming have 
a user routine which does' nothing - i! consists simply of a RETURN statement followed by an END statement, and, If 
the block's user routine has never been worked on, this default routine will be brought up by the editor. To make a 
functioning routine, the user must add FORTRAN code before the RETURN statement to perform the desired function, 
(In the presently preferred embodiment, the user can simply edit the file like any other FORTRAN source code file on 
the VAX.) For example, code for iogging messages or calling an expert subroutine can be inserted at this point 
[0268] Once the user has edited the user routine and returned to the menu, he can select option 5 to check for 
FORTRAN syntax errors. If the new routine has no FORTRAN syntax errors, the screen will show "The user's routine 
compiled with no errors in syntax," If the new coding has syntax errors, the user will see them reported on the terminal 
screen. The user can then correct the errors using Option 1 (edit), and repeat until all errors have been removed. 
[0269] Once the user has a routine that compiles with no errors, he can include it in the running version of the 
supervisor procedure by using mean option 6 ("Update"). This will compile the user's routine, relink the base cycle 
procedure using the user's newly compiled routine, stop the procedure which is currently running, the restart the base 
cycle procedure using the newly linked version containing the user's new routine. 

[0270] After compiling the user's routine, the build-supervisor procedure will ask if there are any other subroutines 
in separate files that need to be compiled. Some application may require more than one subroutine, and, if desired, 
they can be split up in separate files. To make a routine in a separate file, the user can select option 2 ("Edit a separate 
FORTRAN subroutine") to create and modify the file, and then select option 6 ("Check a separate subroutine for FOR- 
TRAN errors") to check for FORTRAN errors. To include the separate file into the supervisor procedure, the user can 
use the update option, then answer "Y:" when asked if any separate routines need to be compiled and included. The 
base cycle procedure can then be linked, and then restarted. 

[0271] After the user's routine has been incorporated into the basic cycle procedure, the user can monitor it to make 
sure it executes properly. There are two key indicators of a problem with the user's user routine: the block status and 
the control program log file. If the user's routine has an error which would normally cause a stand-alone FORTRAN 
program to terminate, the base cycle procedure will bypass the error and the remainder of the user's routine, and 
change the block status to "On-Failed usr routin*. This can be seen using the block monitoring screen. If the user's 
routine fails once but runs successfully on a subsequent execution, the block status will be changed to "On-Recovrd 
Usr Error", and a message will be posted in the control program log file indicating which user routine had the error, 
when it occurred, and what the error was. The log file can be viewed using the ''List log file" option on the System 
functions screen, 

[0272] The user can print a listing of a user routine by using option 3 {or option 4 for a separate routine). 
[0273] if the user's user routine fails and the user needs to retreat to the last version that was running, he can use 
the restore option (keypad 9). This will prompt the user for any separate routines that need to be restored, and retrieve 
the old versions saved by the build-supervisor procedure. 

[0274] In the presently preferred embodiment, there are several include files which an be used in user routines: 
"User^vars.inc* contain a common block which is used to pass information about control block actions to user routines. 
The common block contains a Real array, an integer array, and a character*80 array Control blocks load values into 
these arrays for the amount of change made in the manipulated variable, the error in a feedback block, the time the 
action was taken, etc. The user program block zeros out these values after the user routine executes a RETURN 
statement. "ACSserv.inc" declares all the ACS service routines (which are integer*4 functions). "ACSstatus.inc" de- 
clares all the legal ACS status return values. These values must be declared external before they can be used. 
"Van_J unctions, inc" declares some of the retrieval and time functions from the historical process database, and declares 
some of the status return values. 

[0275] Of course, many different computer languages and architectures could be used in practising the present 
invention: the sample FORTRAN routines specified (as well as other features which, for example, relate specifically 
to the use of a VMS operating system) simply sets forth the best mode as presently practiced, but a tremendous variety 
of other languages, operating environments, and/or hardware could be used instead. 

Block-Handling Utilities 

[0276] Figure 1 4 shows a menu which is preferably presented to a user who has elected to use the utilities provided 
in the build-supervisor procedure (e.g. by hitting keypad 9 when faced with the menu shown in Figure 16). While these 
utilities are not necessary parts of every implementation of the innovative concepts described in the present application, 
they do help users to take advantage of the full power available. 
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[0277] In the presently preferred embodiment, the supervisor procedure includes the capabilities for copying and 
deleting blocks, and for printing listings of block setup parameters. Deleting a block (Keypad 7} removes all the block 
type and setup parameter data lor the block, leaving it available for another user. Copying a block (Keypad 8) reproduces 
the block type and setup parameters of one block into another. Printing blocks (Keypad 9) allow the user to select 

5 blocks to be printed either by number range or by searching lor string matches in the application name or block de- 
scription fields, and makes full or abbreviated listings of block parameter data on the printer of the user's choice. 
[0278] If the user elects to copy a block, the build-supervisor procedure prompts the user to enter in the "Source 
block* 1 field 1402 the number of the block to copy The build-supervisor procedure then fills in the information fields 
appropriately for that block, allowing the user to confirm that he has entered the right block number, and prompts the 

10 user again for the target block into which the block should be copied (field 1404). After this is entered the build-supervisor 
procedure fills in the information fields for the target block, and prompts the user again. When the user confirms that 
the block is to be copied, the block type and parameters are overwritten in the shared memory 814, After the block is 
copied, the build-supervisor procedure prompts the user again, asking whether the source block should be deleted or 
left unchanged. The build-supervisor procedure confirms that the source block was either deleted or not deleted, 

1B [0279] Block information can only be copied into target blocks whose status is "Off* or "Inactive". To copy information 
into a block with an active status, the user must go to the block setup form for that block, and toggle and block off. This 
safeguard provides greater system integrity. 

[0280] In the presently preferred embodiment, keypad 9 will initiate printing a listing of selected block parameters. 
The build-supervisor procedure will prompt the user to enter in field 1410 for the starting range of block numbers to 

so print, or to hit return if he wishes to select blocks by string searches. To print a range of block numbers, the user can 
enter the lowest number block in the range, press return, then enter the higher number block (in field 1412) and press 
return. To select the blocks to be printed by search for string matches, the user can press return without entering a 
number for the starting block. To search the block description fields, the user can enter the desired string in the de- 
scription search string field 1406. To search the block application name field, the user can press return without entering 

£S anything in the description field, and enter the desired string when prompted in the application name field 1408. In 
either case, the user can use capital and lower case letters interchangeably, since case is not checked in the string 
searches. The user need not fill in the whole search string field. A block will be selected to print if the string the user 
enters appears anywhere in the searched field. 

[0281] The build-supervisor procedure will now prompt the user for a short or long list. A short list shows only the 
so block number, type, description: and application name. A long list shows the entire setup form for that block. The build- 
supervisor procedure will clear the screen and prompt the user for the printer he wishes to use. The user can type the 
number ol the printer if he knows it, or enter L to get a list of printers to choose from. The user's terminal screen and 
its attached printer can be selected, as well as Vax system printers. When the print job is completed, the build-supervisor 
procedure will report the number of blocks that were printed. 

3S 

Monitoring 

[0282] In addition, the supervisor procedure provides several functions for following the performance of control strat- 
egies as they operate. The block monitoring screen allows the actions o1 individual blocks to followed. The system 

40 functions screen shows the status of the supervisor procedure. The control system runs as a batch-type process on 
the Vax, and so it has a log file which contains all the error messages generated by the system. 
[0283] A user who requests block-monitoring is presented with a block description form which includes a block 
number field in which he can insert the number of the block to be monitored. The remaining fields on the form then are 
filled in appropriately by the build-supervisor procedure, and are subsequently updated every 5 seconds. The informa™ 

45 tion shown includes: 

the current time; 

the time at which the supervisor base cycle procedure will make its next scan through the blocks (and blocks which 
are due fo execute will be executed); 
bo - the block type (which was specified during block setup, e.g. feedforward, feedback, etc.); 
the block description (which was entered during setup); 

the type, number, name and units of the measured variable which was specified in blocksetup (if none was specified 
(e.g. in a program block), this field will be blank); 

the current value and time stamp of the measured variable (the time stamp for compressed variables in the time 
55 the last new value was received; for manual entry variables it is the time stamp of the last entered value; and if no 

measured variable was specified, this field is blank); 

the goal value for feedback blocks (for other block types, this field is empty); 
the number, name, units and type of manipulated variable; 
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the current value of the manipulated variable (with time stamp if one has been defined); 
the timing option entered during block setup; 

the execution time interval specified during block setup. If the block timing does not include any fixed frequency, 
this field Is blank. 

the time the block last did its scheduled actions (this is normally the last time the block was scheduled to execute 
according to its timing option parameters, regardless of whether the bfock acted to change the manipulated vari- 
able); 

the current status of the block; and 

the last five control actions made by the block (or, for Shewhart blocks, the last five deviation values) and the time 
at which they occurred. 

[0284] In the presently preferred embodiments, a similar overhead function permits the user to take a look at the 
current status of key system parameters, including: 

Base scan interval: the time interval at which the base cycle procedure scans through all the properly configured 
blocks, checking for changes in the on/off status, testing each according to its timing option and status to determine 
whether it should execute, and executing those that are due to execute. 

Next base cycle time: the time at which the supervisor procedure will actually do the next scan. This time should 
always be in the future, and should never be more than the base scan interval away. 

Current system status: provides information about what the supervisor procedure system is currently doing. Since 
the supervisor procedure only does its actions once every base scan interval, the system spends most of its time 
sleeping - Le. waiting for the next cycle time to come. The normal system status values are: 

* Running-Sleeping : the normal status value. All control actions on the last scan have completed and the system 
is waiting for the next scan, 

* Running-Computing : the system is currently performing block checks and executing blocks. Since calculations 
in the supervisor procedure finish rather quickly this status will rarely be seen. 

* Terminated normally: This status indicates that the supervisor procedure system has been stopped in an or- 
derly way. Normally this status value will only be seen if the system manager has stopped the system, or briefly 
when a user performs the Update function on the user program menu. 

[0285] An authorized user can change the base scan interval, stop the supervisor process (together with any auxiliary 
processes used for communication with PCS or othercontrol systems), restart the supervisor process (and any auxiliary 
processes), or view the log file to which the base cycle procedure writes error reports and messages. 

Block Initialization 

E0286] Blocks are initialized when they are first turned on, or when the supervisor procedure is restarted after an 
outage of 30 minutes or more and the block had already been on. Block initiation sets the "last execution time B of 
the block to the current time. The "last execution time" value is used in fixed interval timing and also as a biock monitoring 
parameter. If the block has a measured variable, the "last measured time* is set equal to the current time of the measured 
variable. This parameter is used when block timing is keyed off the measured variable. If the block timing is set to key 
off another block, the key block time is set equal to the last execution time of the key block. For feedforward blocks, 
the "old measured value 11 is set equal to the current value of the measured variable. 

Bu i jd-Expe rt and Expert P rooedures 

[0287] The procedures for constructing an expert system from a domain expert's knowledge will now be described, 
together with the procedures by which the expert system is called up by the operating software (preferably the process 
control supervisor procedure, as described above). 

[0288] It should be noted that the structures and advantages of the build-expert procedure are not entirely separate 
from those of the expert procedure (or procedures) generated thereby. The two procedures are preferabiy operated 
separately, but they are designed to for advantageous combination. The features of the expert procedure are partly 
designed to advantageously facilitate use of the build-expert procedure, and the features of the build-expert procedure 
and partly designed to advantageously facilitate use of the expert procedure, 

[0289] The build-expert procedure works especially advantageously as an integral part of the supervisor procedure, 
which (in the presently preferred embodiment) is a VAX-based layered control system. The build-expert procedure 
produces complete FORTRAN subroutines that execute the expert actions. The supervisor procedure (e.g. via a user 
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program block) provides the functions for running an expert subroutine at specified times, and also provides callable 
routines that can be used by these subroutines to make and modify supervisor actions. The build-expert procedure 
can be used without the preferred supervisor procedure, but the user must provide a host program running at appro- 
priate times to call the subroutines. 

5 

Preferred Menu Structure 

[0290] In the presently preferred embodiment, the build-expert procedure is accessed by selecting the "User pro- 
gram 11 option on the top-level menu in the build-supervisor procedure (see Figure 16), entering the desired block 
10 number, and then selecting the Expert system development option on the user program menu. This will take the user 
to the build-expert procedure, which (in the presently preferred embodiment) presents a menu as shown in Figure 17. 
[0291] From this menu the user can access setup templates for the 3 rule types. The user also has access to functions 
for printing the rulebase, and for building a new expert subroutine, 

[0292] The rule templates used in the build-expert procedure allow the user to enter and modify the specification 

15 information for rules. The build-expert procedure is different from the build-supervisor procedure in the way it handles 
data. When a rule name is entered in the build-expert procedure and the RETURN or TAB key pressed, the letters are 
capitalized and the embedded spaces are transformed to underscores. This is how the build-expert procedure stores 
all character data. The other fields on rule templates are not transformed like this until the rule is stored. When the rule 
is recalled onto the template, the other fields will be capitalized with embedded blanks changed to underscores. In the 

20 presently preferred embodiment, the rule name, data type, and data number fields are the only fields on the rule tem- 
plates for which the user's entry is checked immediately (others may be modified in the future to do this), The remaining 
fields can be filled in with any data that the template allows (some fields accept only integers, some only atphabetics, 
etc). The data on the remaining fields is tested only when the user presses the keypad "-" to store the rule. The build- 
expert procedure then examines the data for errors, and requests corrections if needed. The build-expert procedure 

25 always checks rule names (and condition names) to be sure they are valid and meaningful where entered. In the 
presently preferred embodiment, the build-expert procedure checks other data for most errors, but if does not check 
for all conceivable errors. Data entered on a rule template is NOT stored until the keypad key is pressed to store 
the rule. Data on a template will not be stored if the rule name field is blank. Data on a template can be lost if the user 
enters the data, then modifies the rule name field before pressing keypad All the rule templates have a "delete rule 11 

so (keypad a ~*) and "top of form" (keypad 9) softkey, The delete rule key will askthe user to confirm the deletion by pressing 
the key again, and then deletes the rule from the rulebase. The top of form key simply takes the user to the top of the 
template. 

[0293] After all the rules have been entered, the FORTRAN expert subroutine must be generated using keypad 9, 
"Generate Expert". Changes made in the rules will not become effective until the expert is rebuilt. When the build- 
55 expert procedure is used within the build-user-program environment (as discussed above), the FORTRAN subroutine 
is generated in the same directory with the user program and is named Bloc kn_expert_sy stem .for, with the subroutine 
name Biockn_expert_systern (n is the number of the block being worked on.} To use the expert from within the super- 
visor procedure, a one line user program must be written to call the expert. The one executable line is; 
Call Blockn_expert_system . 

40 

Standardized Data Interface 

[0294] The build-expert procedure uses a standard data interface. In the presently preferred embodiment, data sourc- 
es are specified by a pair of integer parameters. One, the "data type", is a coded value which identifies the type of data 
45 desired and the data collection system from which the data is to come. The second , the "data number", identifies the 
specific data entity of that type within that system. Some data types (e.g. time averages) require a third parameter 
specifying the time over which to average. 

[0295] This system has several advantages. First, it provides a simple method of data identification in a many ^system 
environment. Secondly, it allows the rules to easily reference data of many types from many diverse (and possibly 

&o remote) sources without requiring the user to write any custom program code for data retrieval. Some useful data 
sources might include: any lower level process control system; any supervisor process (whether running on the same 
hardware system or another); any process database (whether running on the same hardware system or another); of 
any computer which collects or generates data ("computer" being defined vary broadly to include, e.g. , any system 
which includes a microprocessor, such as a microprocessor based single bop controller). 

^5 [0296] in the presently preferred embodiment, the data types allowed by the build expert procedure are: 1 ) the latest 
value of a database variable; 2) a time weighted average over a given time interval of the value of a database variable; 
3) a simple average over a given time interval of the discrete data values of a database variable; 4) the feedback error 
of a feedback block in the supervisor process; 5) the change in the value of the measured variable of a supervisor 
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feedforward block since the last time the block acted; 6), 7} the goaf values of control loops in two particular lower level 
control systems; 8) the second most recent value of a discretely sample process database variable: 9)J 0) the maximum 
and minimum limits for the manipulated variable value in a supervisor control block. Other sources could be used, for 
example any kind of parameter from any of the systems named in the previous paragraph, or system lexical functions 
$ (such as the system clock)'. As a further alternative, It might also be advantageous in some embodiments to make one 
of the options here a one-line blank, in which the user could enter a pointer to a callable procedure to fetch a variable 
value. 

[0297] In the presently preferred embodiment, the user must specify the data type before the data number. When 
the data type Is entered, a prompt line pops up on the template indicating the specific data type, which aids the user 
10 in entering the proper value for the data number. When the data number is entered, it is tested to be sure it is a 
meaningful entry for the data type specified, Some additional information is then displayed (such as a variable name 
and its units) to aid the user in confirming his input These fields also serve to aid understanding of rule function and 
meaning when recalled for review or modification. 

1& Constructing the Expert System 

[0298] An expert system goes through four steps in using knowledge: 1 ) The expert gets information from the outside 
world; 2) analyzes that information using its rules; 3) deduces the correct conclusion from its analysts; 4) communicates 
its decision to the outside world. 
20 [0299] Rules state that WHILE one thing is true THEN something else must be true. For example, WHILE the com- 
position of water in the Feed mix drum is greater than 12%, we say TEED MIX WATER COMPOSITION" is "HIGH". 
Or, WHILE "FEED MIX WATER COMPOSITION" is "HIGH*, AND "DENY COLUMN BOTTOMS WATER 1 ' is "HIGH", 
we say "TOTAL SYSTEM WATER" is "TOO HIGH". WHILE "TOTAL SYSTEM WATER" is "TOO HIGH", we "Give a 
high water warning message." 

25 [0300] This simple example shows the three basic types of rules which are used in the build-expert procedure: the 
sample retrieval rule described tests the VALUE (12%) of a process measurement (FEED MIX WATER), and assigns 
a value {HIGH, LOW, etc.) describing the condition of the measurement. The sample analysis rule given tests for 
combinations of values defined by other rules. If it finds the combination, the analysis rule creates a new condition 
{TOTAL SYSTEM WATER) and assigns a value (TOO HIGH} describing that condition. The sample action rule de- 

so scribed tests tor one specific condition (TOTAL SYSTEM WATER) has one specific value (TOO HIGH), and takes a 
specified action (Give a high water warning message).. 

Sample Expe rt System 

35 [0301] An example of construction of an expert system using novel methods and system as set forth in the present 
application will now be described in detail. The sample system here chooses an optimum control action from among 
three possibilities. A key element of the problem here is to control the composition of by-product MFB in the product 
stream of a refining train like that shown in Figure 7. MFB is separated in two columns in series. Essentially equivalent 
response in MFB composition can be achieved by changing the steam flow to either column. Both columns use high 

40 value steam in their reboilers. The first, the Xylene column, dumps the steam energy to cooling water The second 
column, the MFB column, recovers most of the energy by generating steam overhead. Equipment limitations constrain 
both steam flows to within high and low limits. 

[0302] As column feed rate varies, steam loading can change from minimum steam on both columns to maximum 
steam on both columns. The optimum operation maximizes steam on the low cost column (MFB) and minimizes steam 

45 on the high cost column (XYL). 

[0303] in this example, control of the MFB composition is done statistically. The laboratory measurements of MFB 
are statistically tested using Shewhart tests. The Shewhart tests determine the on aim status of MFB: Off aim high, 
Off aim low, or on aim. When MFB is off aim, the Shewhart test generates an estimate of how far off aim MFB is. This 
estimate can be used to compute the feedback action needed to bring MF8 back to aim: off aim high requries an 

so increase in steam to the two columns, off aim low requires a decrease. 

[0304] The expert system which is sought to be developed should instruct the supervisor procedure to make the 
least cost control action. Plant startup, problems, or poor manual operation may distribute steam in a non-optimal way, 
and this cannot be known beforehand. The objective will be to move toward the optimum steam distribution through 
control action response to off aim conditions. Steam will not be shifted for cost savings only since this complicates 

55 control and may negatively affect quality. 

[0305] Although this may seem like a trivial decision, it actually involves considering 3 variables in the correct se- 
quence, This is where the "expertise 8 gets into the "expert" system. Developing the logic is the task of the human 
expert, and the system disclosed herein merely expedites the transfer of that logic into the expert system. The process 
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control decision tree which wit! be implemented, in the sample embodiment described, is as follows: First, decide 
whether to add or cut steam: 

(1) If adding steam: 

5 

[0306] 

(1 .1) First check the MFB column. If MFB column steam below maximum, add steam here. 

10 (1-2) If the MFB column steam is maximum, then (1 ,2.1) Check the Xylene column, ff xylene column steam is 

below the maximum, add steam here. 

(1 ,2.2) If xylene column steam is maximum, the user cannot add steam. To get MFB on aim, feed to the column 
must reduced. Cut column feed. 

15 

(2) if cutting steam: 
[0307] 

so (2.1 ) First, check the xylene column. If xylene column steam is above the minimum, cut steam here. 

(2.2) If xylene column steam is minimum, then 

(2.2.1) Check the MFB column, If MFB columns steam is above minimum, cut steam here. 

(2.2.2) If MFB column steam is minimum, the user cannot cut steam. To get MFB on aim, Feed to the column must 
be increased. Add column feed. 

25 

[0308] It Is highly desirable that the decision tree being implemented should cover ail the possible cases, and that 
the conclusions should be mutally exclusive. 11 it does not cover all the possible cases, the expert will sometimes be 
unable to come to a conclusion. If the conclusions are not mutally exclusive, then more than one conclusion could 
exist. Although this might logically be possible, this condition might mean unpredictability as to which conclusion will 
so be reached, so that there would not be a reproducible basis for action. 

[0309] Domain experts, in performing the analytical steps which the expert system should ideally emulate, will carry 
out many steps implicitly; but implementing a process in a computer requires that each step be expressly spelled out. 
To make the decision, the user must first specify: 

35 - what measurements will be used to evaluate the process condition (in this example, MFB__STEAM, XYL_STEAM, 
Dl RECTION_OF_CH ANGE); 

what ranges of values of the measurements (e.g. 40 > XYL_STEAM) match what status values for the measure- 
ments (e,g, M)D_RANGE); 

what combinations of status values (e.g. MFB_STEAM is MAX and XYL_STEAM is MIN, and 
40 Dl R£CTION_OF_CHANGE is ADD) will result in what other conditions ACTION is CHANGE_XYL_STEAM); 

what must be dome to make the desired action happen. 

[0310] The detailed specifications needed to handle this problem are defined as follows: 

[0311] Measurements: For MFB column steam, the goaf on the computer loop for MFB steam is a good measure. 
45 in the sample system referred to, this is loop 30 in the "DMT PCS" system. For xylene column steam, the goat on the 
computer loop is a good measure. In the sample system referred to, this Is loop 5 in the "DMT PCS" system. For the 
direction or change, the best measure is the feedback error on the control block that will be changing steam (in this 
case, the third block in the supervisor procedure). For MFB column steam, we know the operating limits of steam flow 
to the column {in thousands of pounds per hour (MPPH)): 

so 

MAX > 49.5; 
MIN < 2B.5; 
MID > 28.5 < 49,5. 

ss And for the xylene column: 

MAX > 66.5 
MIN < 40.5 
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MID > 40,5 < 66.5. 

For the direction of action, we know that an off aim high condition moans a steam increase. Our feedback block (in the 
supervisor procedure) is using the Shewhart deviation from aim as the measured variable , with an aim of 0.0. Thus if 
£ the feedback error is positive, we increase steam: 

AND if Feedback error > 0 
CUT if Feedback error < 0 or - 0 

10 [0312] For the analysis of these conditions, we need to specify what combinations of conditions lead to what result. 
This expert provides only one result: it defines what the manipulated variable wilt be - xylene column steam 
("xyLcoLsteam"), MFB cofumn steam ( H MFB_coLsteam H ), or column feed ("column_-feed"). This logic results in the 
following rules: 

is Table 5 



20 



25 



MAN IP U LATE D__VAFll ABLE is MFB_ 


COLU MN__STE AM While 


Direction_of_change 


is 


ADD 


and MFB_COL_STEAM 


is 


not MAX 


MANIPULATED_VARIABLE is XYL_COLUMN_STEAM While 


Direction_pf__change 


is 


ADD 


and MFB_COL_STEAM 


is 


MAX 


and XYL_COL_STEAM 


is 


not MAX 


MAN 1 P U LATE D_VAR 1 ABLE is COLUMN JFEED While 


Direction„of_change 


is 


ADD 


and MFB„COL„STEAM 


is 


MAX 


and XYL_GOL_STEAM 


is 


MAX 


MAN 1 P U LATE D_VARI ABLE is X YL_COLU M N_ST E AM While 


Direction_pf_change 


is 


CUT 


and XYL_COL_STEAM 


is 


not MIN 


MAN 1 P U LATE D_VARI ABLE is MFB_ 


COLU MN_STE AM while 


D i rection_of_change 


is 


CUT 


and XYL^COL^STEAM 


is 


M1N 


and MFB_COL_STEAM 


is 


notMIN 


MAN IPULATED_VARI ABLE is COLUMNJ=EED While 


Direction^oLchange 


is 


CUT 


and XYL_COL_STEAM 


is 


MiN 


and MFB„COL_STEAM 


is 


MIN 



[0313] Note that: 1 ) some of the conditions are negated, Le^ it is specified that a rule or condition must NOT have a 
certain value (MFB_COL_-STEAM is NOT MIN). 2) More than one test can set the value of the same condition 
(MAN! PULATED__VARIABLE in this case). 3) More than one test can assign the same value to the same condition (L 
e. the second and fourth both set MANIPULATED VARIABLE to XY L_COL_STE AM , under different conditions). By 
constrast, the retrieval rules each assign one of several descriptors to a name which is unique to that specific rule. 
[0314] Finally, the expert must do something with its conclusion to change the way the supervisor acts, in this case, 
assume that there are three feedback blocks in the supervisor procedure, all having the Shewhart MPS deviation as 
measured variable : with aims of 0.0, One (#3) manipulates xyLCOL_steam, one (#4) MFB_coiumn steam, and one 
(#5) column feed rate. The supervisor procedure includes a FORTRAN callable function named 
ACS_SELECT_BI_OCK, which allows only one block out of a set to take action. The others are "de-selected" and stand 
ready to act if selected. When ACS_select_block is called, the first block number in the argument list becomes selected, 
the others are deselected. Trailing zeros are ignored, 

[031 5] Thus, to enable the expert being built to change the control strategy the following rules are added to the rule 
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set: 

While MANIPULATED VARIABLE is XYL_COL_STEAM Then 

do the FORTRAN statement; 

ACS_status a: ACS_seleci_block ( 3, 4, 5, 0, 0, 0 ) 
While MANIPULATED VARIABLE isMFB_COL_J3TEAM Then 

do the FORTRAN statement: 

ACS_status = AGS_select_biock (4, 3, 5, 0, 0, 0 ) 
While MANIPULATED VARIABLE isCOLUMN FEED Then 

do the FORTRAN statement: 

ACS_status ss ACS_select_biock ( 5, 3, 4, 0, 0, 0 ) 
The foregoing data entries are aU the Inputs needed to define the expert system. 

[0316] Within the supervisor procedure, an expert system can be developed tor each block. Used in this way, the 
build-expert procedure will create the FORTRAN subroutine Biockn_expert_system (where n is the block number, Le, 
the subroutines wilt be named BLOCK2_EXPERT_j3YSTEM etc.), compile it, and place it in the proper library so that 
it can be called from within a supervisor block (by a user routine). 

Expert Rule Structure 

[0317] This sample embodiment provides an example which may heEp clarify what an expert procedure does. Some 
more general teachings regarding expert system methods and structure will now be set forth. 
[0318] Figure 2 Is a schematic representation of the organization preferably used for the knowledge base. Three 
main categories of rules are used, namely retrieval rules 210, analysts rules 220, and action rules 230. 

Retrieval Rules 

[0319] The retrieval ruies 210 each will retrieve one or more quantitative inputs (which may be : e.g., sensor data 
157 from one of the sensors 156, historical data 141 and/or laboratory measurements 162 from a historical data base 
140, Hmits on variable values, goals 132 defined by the supervisor procedure 130, combinations of these, or other 
inputs). One of the significant advantages of the system described is that it provides a very convenient user interface 
for accessing quantitative Inputs from a very wide range of sources: essentially any data object which can be reached 
by the host computer can be used. (The presently preferred embodiment uses DEOnet and serial communication lines 
to link the computer which will be running the expert system with the various computers it may be calling on for data, 
but of course a wide variety of other networking, multiprocessor, and/or multitasking schemes could be used instead.) 
[0320] In the presently preferred embodiment the retrieval rules are of two kinds: the simpler kind (referred to as 
"variable rules") will name one quantitative value (which may optionally be derived from several independently accessed 
quantitative inputs), and assign one of a predetermined set of descriptors (variable status values 222) to that name. 
Each of the more complex retrieval rules (referred to as "calculation rules") permits descriptors to be assigned selec- 
tively to a name in accordance with one or more calculated values (which may optionally be derived from a number of 
quantitative variables). 

[0321] Figure 3 shows the template used for a retrieval rule in the presently preferred embodiment, together with a 
sample of a retrieval rule which has been entered into the template. The areas in this drawing which are surrounded 
by dotted lines indicate the parts of the template which the user can modify, and which are preferably highlighted to 
the user in some fashion, e.g. by showing them in reverse video. In this example, the user has typed In the rule name 
as "xylene column steam." The build-expert software has automatically translated this rule name, by changing all the 
spaces in it to underscores, so that it appears as a one word name, (This can be conveniently used as part of a variable 
name in conventional computer languages.) Thus, the rule shown in Figure 3, when translated into an expert procedure 
by the build-expert procedure, will define a set of variables whose names each begin with 
"XYLE NE_COLUMN_STE AM . w 

[0322] For example, in the presently preferred embodiment the rule shown will translate into the following set of 
variables: 

[0323] "XYLENE.COLUMN^STEAM^STATUS 11 is a character variable (also known as a string or alphanumeric var- 
iable) which will have a string value which is either "MIN," "MAX, " or "MID;" 

[0324] "XYLENE jDOLUMN._STEAM_ VALUE" will be a real variable, representing the quantitative value originally 
retrieved for the parameter; 

[0325] "XYLENE JX>LUMN_STEAM_AGE W will be an integer variable representing the age of the quantitative value 
originally retrieved; 

[0326] "XYLE N E_COLUM N_STE AM__ AS TAT" will be a character variable which is defined to have values of 
*TOO_OLD ,f or "OK," depending on whether the age value is within limits (note, for example, that this variable could 
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easily be configured as a logical variable instead); 

[0327] and "XYLENE^COLUMN^STEAM^FIRED" will be a logical variable which Indicates whether this particular 
rule has been fired (on a given pass). 

[0328] In filling out the retrieval rule template, the user must fill in at least two of the classification blanks. However, 
s In the presently preferred embodiment only five classification ranges are permitted, (This limit could be changed, but 
there are significant advantages to permitting the user to input only a restricted number of ranges. Where the process 
control algorithm absolutely demands that the variable be classified into more ranges, two or more process variable 
rules could be used to label up to eight or more ranges.) 

[0329] Another constraint used in the presently preferred embodiment is that the user must enter at least the first 
10 two open ended ranges. He may enter up to three bounded ranges, to provide a complete coverage of all cases, but 
he must enter at least two open ended range specifications. 

[0330] In the presently preferred embodiment, the build-expert procedure checks to see that the ranges defined are 

comprehensive and non-overlapping, before the rule is permitted to be added to the rule base, 

[0331] Figure 4 shows an example of a different kind of retrieval rule, known as a calculation rule. The menu for this 

is rule is (in the presently preferred embodiment) presented to the user as two screens. The user may specify up to ten 
quantitative inputs, of any of the types just referred to, as well as up to ten values arithmetically derived from these 
inputs (or constants). By having some of the derived values refer back to other ones that are derived values, quite 
complex formulas may be implemented. (One advantageous use of such formulas may be to relate off-line time- 
stamped laboratory measurements with the continuously-measured values of the same (past) time era, e.g. in a com- 

20 ponent material balance.) Moreover, notice that the variable values and calculated values thus assembled may be 
used not only to define a "key value" to be categorized, but also to define the limits of the various categories against 
which the key value is sought to be tested. 

Analysis Rules 

25 

[0332] Analysis rules generally are used to embed the natural language reasoning as practiced by the domain expert. 
One important distinction between retrieval rules and analysis rules is that each retrieval rule has a unique name, but 
the analysis condition names defined by analysis rules are not necessarily unique. Figure 5 shows an example of an 
analysis rule 220. Again, the portions of the template which the user can modify are shown inside dashed boxes. Note 

30 that the template preferably used defines an analysis condition name and assigns a descriptor to that analysis condition 
name if specific conditions are met. In the presently preferred embodiment, the only tests permitted are ANDed com- 
binations of no more than five logical terms, each of which can consist only of a test for identity (or non-identity) of two 
strings. Moreover, the string identity tests are preferably set up so that each of the comparisons either tests a retrieval 
rule name to see it a certain variable status value 21 2 was assigned by that rule, or tests an analysis condition name 

3s to see if a certain analysis status value 222 was assigned by one of the analysis rules. That is, as seen schematically 
in Figure 2, there is potential for recursion among the analysis rules 220 considered as a group, since some of the 
analysis rules 220 can refer to the outputs of other analysis rules 220. Optionally the analysis rules could be sequenced 
so that there would never be any open-ended recursions, but in the presently preferred embodiment this extra constraint' 
is not imposed, 

40 [0333] Any one analysis condition name may (under various conditions) be assigned values by more than one anal- 
ysis rule. That is, each analysis rule is preferably set up as an IF statement, and multiple such I F statements will typically 
be needed to specify the various possible values for any one analysis condition name. 

[0334] in the presently preferred embodiment, the status of every analysis condition name and variable rule name 
are initially defined to be "unknown/ 1 and the logical comparisons are implemented so that no test will give a "true" 

4S result if one term of the comparison has a value of "unknown." 

[0335] The order in which the analysis rules are executed may be of importance where an analysis condition name 
is multiply defined. That is, it may in some configurations be useful to permit the conditions of the various analysis rules 
220 to be overlapping, so that, under some circumstances, more than one analysis rule may find a true precondition 
and attempt to assign a status value to the same analysis condition name. In this case, the sequence of execution of 

so the analysis rules 220 can optionally be allowed to determine priority as between analysis rules, However, as mentioned 
above, this is not done in the presently preferred embodiment 

[0336] Moreover, more than one analysis ruie may assign the same analysis status value 222 to the same analysis 
condition name, under different circumstances. 

[0337] It can be advantageous, for purposes of documenting the reasoning embedded in the expert system, to give 
bb names to the analysis rules which include both the name and descriptor possibly finked by that rule: thus, for instance, 
a rule which is able to conclude that column operation is normal might be named "COLUMN _OP_NORMAL" 
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Action Rules 

[0338] Figure 6 shows the presently preferred embodiment of the template for action rules, and an example of one 
action rule which has been stated in this format. Again, the portions of the template which the user can modify are 

5 indicated by dashed boxes. 

[0339] The user has chosen to name this particular action rule "Change Xylene Steam," which the build-expert soft- 
ware has translated into CHANGE_-XYLENE_STEAM {for incorporation into various variable names such as 
"CHANG E_XYLENE_STEAM_-Fi RED"). The names assigned to action rules are primarily important for documenta- 
tion, so that, when this user or another user looks back through the rule base, the use of clear rule names for action 

10 rules will help to understand what the structure of the expert system's inference chaining is. in fact, it may be advan- 
tageous, as in the example shown, to generally pick analysis status values 222 which have fairly descriptive names, 
and then, to the extent possible, name the action rules identically with the corresponding analysis status values, 
[0340] Note also that the action rules can refer back to a variable status value 212 as well as to an analysis status 
value 222. 

15 [0341] Thus, in the presently preferred embodiment the action rules embody an absolute minimum of logic. They 
are used primarily as a translation from descriptive key words embedded within the inference chaining structure to the 
actual executable statements (or command procedures) which specify the action to be taken. Thus, one way to think 
about the advantages of the expert system organization preferably used is that the emulation of natural language 
reasoning is concentrated as much as possible in the analysis rules, while the retrieval rules are used to provide 

20 translation from quantitative measurements into input usable with natural language inference rules, and the action 
rules are used almost exclusively to provide translation from the natural language inference process back to executable 
command procedures which fit in well with the computer system used. 

[0342] Each of the action ruie templates also gives the user several choices for the action to be taken to implement 
the action rule if its precondition is met. The user can either insert an executable statement (in FORTRAN, in the 
£5 presently preferred embodiment} or insert a pointer to a command procedure, or simply have the action rule send 
advisory messages. The third option is useful for debugging, since the expert can be observed to see what actions it 
would have taken, without risking costly errors in the actual control of the system. 

[0343] In the example shown, an executable FORTRAN statement is used, but the statement specified merely passes 
an action code back to the supervisor process. In the example shown in Figure 6, the procedure call given will cause 

30 the supervisor procedure to turn on the block whose number is given first, and turn off all other blocks whose numbers 
are given. Thus, the statement 

acs-status = acs_select_block (3, 4, 5 } 0, 0, 0) 
would change the status of block 3 to "on-s elected" (assuming that it did not need to be initialized), and would set the 
status values of blocks 4 and 5 to "on-deselected. " Thus, when the expert system has completed running, the supervisor 

35 procedure which called the expert procedure as a subroutine can selectively execute block functions depending on 
the values passed back to it by the subroutine. 

[0344] Thus, the action rules permit a very large variety of actions to be performed. For example, one optional alter- 
native embodiment provides synthetic-speech output; optionally this can be combined with a telephone connection, to 
permit diai-out alert messages (e.q, to a telephone number which may be selected depending on the time of day shown 
40 by the system clock, so that appropriate people can be notified at home if appropriate). 

[0345] Another optional embodiment permits an action rule to call up a further sub-expert. This might be useful, for 
example, if one expert sub-procedure had been customized to handle emergency s?fcuations~who should be called, what 
should be shut down, what alarms should be sounded. 

45 Generating the Expert Procedure 

[0346] After the user has input as many rule statements as needed, or has modified as many of an existing set of 
rule templates as he wishes to, he can then calf the generate code option to translate the set of templates 115, including 
the user inputs which have been made into the rule templates, to create the expert system 120. 

so 

Generating Source Code 

[0347] As a result of the constraints imposed *n the various rule templates, the translation from the constrained format 
of the templates is so direct that the executable rules can be generated simply by a series of appropriate string-equiv- 
ss alent tests, string-append operations, logical-equivalence tests, arithmetic operations, and fetches. 

[0348] Preferably three passes are performed: the first does appropriate character type declarations; the second 

loads the appropriate initializations for each rule; and the third translates the inference rules themselves. 

[0349] An example of the initialization steps is seen in initialization of the analysis rules: an initial value such as 
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M dontJcnow" is assigned to each condition name, and the equivalence tests are redefined slightly by the translation 
procedure, so that, until some other value Is assigned to the name by another rule, the statement 
"name* = "descriptor* 

will be evaluated as false, and the statement 
NOT("name" s= "descriptor") 
will also be evaluated as false. 

Sample Source Code 

[0350] A portion of the source code for the procedure which actually performs this function, in the presently preferred 
embodiment, is as follows. 



c 

C BwUd_©Kp*rt .for 

C 

C Routine to generate fO&Tft&tt expert systea code using 

C the precete rulefc>A»e. 

C 

C 

c 

Subroutine Buf Idjfcxpert 

C 

1 nc I ude ' pa c •* i ne I udee : Ver t *b t e_ru I e_p*r e»* . $ nc * 
Include * psc*ft include* : Expert _dets • i nc * 
include *peceftfnelude»$An*ly*f *,_eees»one . Ine* 
include »p*ceft include** An* I y*U_rule. t nc* 
Include * pec eft include*: Ac t i on_eo88Km». *ne * 
Include 'pee eft Includes: Act f en_rule, inc* 
Include * peceft i nc I ude» : Act i on_p*r*s« . t nc » 

C 

Logical First 
Logical No^&ore 
Character^? L»Kt_cond 
Char*ct*r*60 code^d I rj 1 1 e 
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10 



Character***) 9 i rectory 

Inteeer*2 l>J**r 

Charact*r*39 Subr out i fia_naw# 

Ch«racter*H iubprocaaa^nata* 

Charact»r*3 Cblock 

imager* 2 L^ap 

eh* r ae t *r* 1 S* arches t r I ng 

Integer** $rUn 

Call Fdv*Putl{» Generating Expert Syetm cod*.****) 



C 

C,-.R#*Hnd the code file 

75 C 

d «Ht*<6,*> * Mill rewind eoda 

ftewind i Unit * Cede^lun ) 
ttext_label m 2 

c 

20 C — Get the natot of the expert ay a tea code file, pick out the C subroutine name 

fro» it 
C 

d Call fdviputt C 'Will tranaUte UgicaU. 1 ) 

25 Cell UbSaye^trnlofl < 'PACEttULCS* Directory ,,,) 

Celt Lib**y*_trnlog < »*ACESCODE* Codejii r^f f I* , # ,) 
d Call FdvSputl ( 'Did translate logical*.' > 

latart * Index < Cod*_di r^f Ue, »3 * ) 
Subrout i najiame ■ Code^di r_f 1 iecifttart+1 : BO) //Blank 
30 d Call FdvSputl C 'Will get index of 

lend * Index < Subrout int M nM«, ».* ) 
d Call FdvSputl ( *UUl clip aubrout name.') 

If < lend r 0t. 1 ) Then 

Subrout int_name * Subrout ine_name(1 tiend-1)/ /Blank 
Et»« 

Subrout Sne_na»* » 'Expert ' //Blank 
End tf 

d Call FdvSputl < »will tri» aubroutfne na«*e- •) 

Call StrStrla ( Sub rout ine^naaa, Subrout ine^nafae, SrUn > 
d tfHta ( 6, 100 > Sub rout 1 nff_nam« 

Write ( Code^lun, 100 ) Subrout i ne w nam* 

C 

C. * .con&truct a sub~procesi neat* 

45 c 

If < Subroutine_n«»aC1:S> *eq. 'BLOCK* > Then 
d Call FdvftputU'la block. *> 

d Call FdvSwait ( It ) 

Head < Subrout tn*_nat&*<6:fl> , *<I3>* ,err* 91 ) Iblock 
d Call FdvaputlCMa > 99.') 

d Call FdvSwait < It ) 

Liblock « 3 
Go To 93 

ss 91 Mead < Subrout in*_name{6;7) , HID* ,trr« 92 ) Iblock 
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d 
d 



d 
d 



10 



15 



20 



25 



30 



35 



40 



45 



50 



55 



C*U FdvfipwttC *I* > 9.») 
Celt fdvfweit < It > 
If block » 2 
Bo To 93 

92 Read < Subrout tn*_na»e(6:6>, f C 11 ) * ,«rr* 93 ) iblocfc 
Call FdvSputU'1* < 10. '> 

e»u fdvsttfttt < tt > 
Ltblcek * 1 
fip To 93 

93 Writ* e Cblock, *<I3>* ) Ibloek 
Utert « 4 * Ubleck 

Subpr©c**s^n*m* » »B »//Cblock<**t»rt :3>//*_* 
L_ap * 3 ♦ Ubtocfc 
EUe 

L^8fJ * 1 

End if 



c 

100 



ornate 



Options /Efctend^mource* , /, 



C EKpert System Code*,/* 
C. /. 

e». /« 

Subroutine * , A, /, 
C» , / , 

Include 1 'ACSSInctudestACSserv-inc* 1 ■ , / , 
Include • » ACS*includ*er ACSstetu*. inc* • 1 , / 
Include ■ 1 ACSftfaetudeftsSys^furict ions, f nc* * 1 
Include • 1 (fcjpidef )* • 1 , / , 
lnte»er*4 V«*$_to_«scH_t i me* , / , 

Integer TM s^pssa^f i re* 1 r / , 



Cher*cfcer*25 

Parameter 

Character*^ 

Parameter 

Cheracter*25 

Parameter 

integer* 4 

Integer** 

Ch«r*cter*1o* 

Intefler*4 

lnt*9tr*2 

Equivalence 

lnteger*4 

lnteoer*2 

Cher*eter*B0 



Unknown 1 t / # 

( Unknown » ''Unknown 

OK< , / , 

< OK « " DIC 
Too_eld* , / , 

< Too^old « »»Too^old 
BOH 1 , / , 

Then 1 # / , 

C^now* , / t 

lte»li*t(4>« , / , 

Code<2)» . / , 

( JtemLHtM} t ceded) 

Mode' , / f 

ten* , / , 

Lift* 1 , / f 
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10 



15 



20 



SO 



35 



45 



d wr1te<6,»> * wrote header info* 1 

C 

C**Kake declaration code for variable rates 
C 

C 

First m .True* 
1 Continue 

C 

£.*ft*ad A rule 
C 

Cell Read_var^rulej»era«s ( Flret , ttojeore > 
If t Mo M ttori ) Go To 200 

C 

C- -Write out FORTRAN declarations 

c 

Call St rS trim < Rule^naae # Rule^name t Len 5 
Write ( Cede_lun , 10t } CRuie_naae< t : ten) , 4*1 # 5 ) 
1D1 Format C 



1 ' Real** 

1 ■ lftteeer*4 

1 * Ch*racter*25 

25 1 • lOnicttl*1 

1 • CharacterMO 

1 *C 

1 > 



, A t Rvalue* 9 J , 

, A « •.afft 1 t / , 

, A , *_stef , / , 

, A , ^fired' , / , 

, A t '_estat« , / , 



Go To 1 

200 Continue 



C 

C.Malee declaration code for calculation rules 
C 

Call &e£lare_eai€_rulea 

C 

C.Nake declaratipn code for analysis rules 

40 c 

c 

Laat^cond » 1 • 
First « -True* 
2 Continue 

C 

C.tftead A rule 
C 

Cell Read_*naL_rulejpsra»s < First , Wojaore ) 
so If < Ho^wore > Go To 201 

C 

C«. Write out FORTRAN declarations 
C 

Cell StrStrira ( An_eand_name f An^eond^neme , Len ) 
Call StrStrim < An_rute w name , An_rutejnern« p Hen ) 
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Writ* C eod*Jun $ 104 ) 

If < An_eond_na§»* -ne* last_cond > 

1 Write C Code^tun , 102 ) <An_cendjr«M»*C1 : ten) ) 

writ* < Code_tun * ™3 ) <AruruUjrw»e<1: Hen) > 
LMt^eend « An,cond_naese 

102 Form ( 

1 ■ Cheract*r*25 • , A , *_«t»t* 
1 > 

103 format C 

1 " Lt>8*c»l*1 * » A # '„ftrad» 

1 > 

104 Format < 
1 »C 
1 > 

C 

Go To 2 

C 

20 t Continue 

C 

C**iteke declaration code for action rules 

C 

c 

First * *True. 
252 Continue 

C* .Read A rule 
C 

Call «e*d_actionj-uUjaarare* ( First , fcojaor* > 
It C MojRor* > Co To 251 

C 

C** Write out FORTRAN declarations 

C 

Call 5trfctri» ( Ac_ruU_na»e , Ac^rule^name , Len ) 
Write i Code^tun , 262 ) Ac_rute_name(1 : I en) 
262 format ( 

1 * Lo«icelM • , A , »_fir*d« , / , 

1 'C* 
1 ) 

C 

GO To 252 

C 

251 Continue 

C 

c 

C**.Uow write Initialization code 
C 

Write < Code_tun , 401 > Subrout in« w n»»e CtzSrlan) 
401 Foraat C 

1 *C* , / , 

1 *C InitiaUxe the status values.* , / , 
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Ven^statue » Vftet_fro*_aet:*i,J:f»e ( ■* , Uou )> , / , 

Ven_*tatua * VaaS^te^aacii^ttee < Mow # CJloy )' , / t 

Coded) • 4 • , / , 

Cod#{2> * jpUjaode* , / , 

Jt*»lUt<2) » £loc<Kode)* „ / , 

ItMlUtCS) ■ XlocCLan) 1 , / , 

tt**Hst(4> m 0* 9 / , 

•yt M statu» ■ svsSgetjpiw { ## , 1 t*»l l»t ti , )' # / , 
d WHt*(6,901) C_ftOW* B / , 

901 Foraat C / , 11 Running 1 , A , 1 it •» , * >' , / , 
C* 



C 

c 
c 



.Initialize variable rules - this wilt set logical flogs false and 
retrieve the necessary data for the rule. 

First » *True„ 
402 Continue 



C 
C 

C. .Head A rule 
t 

Call ftaad^var^rulejaaram* < First f Wo^aore ) 
If ( Wojmare ) Go To 420 

C 

Call 5tr£tritt ( ttuie^name v 8ule_na»* * ten ) 
Write < Code_lun , 403 ) < Kul e^f>»»e(1 sten) , J »1 t 4 ) 
403 Format < 

1 'C« . / , 

t »C » „ A f • rule initialization* „ / , 

1 , / , 

t * « , A , -^astat * Unknown* ff / # 

1 * • , A , *^*tat a unknown* , / , 
1 » 1 j A 4 «_f ired « -False. ■ ) 



404 
> 1 



If ( Set_»eth *eq. Cur removal ) Then 

Write { eod*_lun , 404 ) Var^num , (Ruie_name{ 1 : 1 en) , J«1 ,2) 
Foraat { 

1 ■ Call 6et_cur_dat« < • , 14 , 1 , • , A f Rvalue , 1 , A , '^ao* 

1 5 

Else If C ftet^aeth .eq. 01scret*_avs } Then 

Write ( cod*_lun ,405 ) Retjtiwe , Varjnjm , C*ule_neme{ 1 : len), 4»1 ,2) 



405 Format < 
1 'C» # / , 

1 « Then » How ♦ ' , 112 ,/ , 

t < Call Get^disc^evo^dats ( 1 , 14 , ■ , ' , A . *_value , ' ( A , 
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■_age , Then , How )' 
1 > 

Eiit tf < Retjeeth Tiwe^irtj&vfl > Then 

Write < edde^tun , 406 J Ret_tt« , Var_mj» , (Rute^naneCl s ten), J*1 ,2> 

406 fftraat C 

« § C* , / , 

1 * Then ■ , 112 , / , 

1 * Call Oet M tf&e w ut„av0 w <iata C * „ 14 , • , « # A # '_valu* , » , A 
, , Then „ Mow >* 

1 > 

EU* If < ftftt^Mth »*C|* SftB^lMt^vant^fwIftt > Then 
Write < eede^lun , 411 > Vsrjius , 

411 ronwt ( 
!'*■,/• 

1 * Call Get_aeG_tBgt_vant_point C * # 14 f • , 1 * A f Rvalue 

1 ) 

El ft* If < Retjaeth .eq. ACS^ff ..delta ) Then 

Writ* < eoda^iun , 407 ) Var^nusa , aul*jfittm*<1 : ten) 

407 F areas t C 

1 - C» , / . 

1 • ACS^atatu* * ACS_*et^FF_delta { * , 14 # 1 , » # A , » value )• 

1 J 

El If t ftetjaeth .*q. ACS_f t>_*rr«*r > Then 

Write i eode^lun , 408 > V*r_m»i , RuU^nameC 1 : Un> 

408 For rat ( 

1 'C f / , 

1 » ACS^atatua * ACS_get_fbj*rrsr < * f 14 , 6 , » , A , * value )• 
1 > 

Ela* If C Retjaath ,eq. PC$_DWT^toep^soel > Then 
Write ( code^lun , 409 > Varjuaa , ftulejrtaateO : len) 

409 Foretat < 

1 'C / , 

1 1 ACS_etatu* • AC$„fi;et J>CS_j&at ( 1 *$KT »* , ■ , 

1 I p 1 * * , A , Rvalue V 
1 ) 

EUe !f < ftetjeeth ,eq. PCSjrPA^toop^aoal > Then 
Write C code^lun , 410 ) Ver_nu» , ftule_riei**a : Un> 

410 Format { 

1 . / , 

I * ACSjstetua * ACS_e;et J>C$_»oel ( "TPA «• # • f 

II i 1 i 1 , A ♦ Rvalue >* 
1 ) 

Ela* 

Write* Code_tun , * ) *C Red retrieval method* 

End tf 

: 

Write { Cod«_lun p 510 ) Uulejiamet 1 1 len) , J«1 , 2> 
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10 



15 



20 



510 Foraat < 

1 »d Wrlte<6,*> »» • . A , Rvalue »• 1 1 , * * A , '.value* > 

C 

Go To 402 

c 

420 Continue 

C 

C. .„ *Ini tla-Uz* calculation ruU* 
C 

Cat I Init^ealc^ruiea 

C 

t Inf tfalUe analysis rule* 

C 

last_eend ■ * ■ 
Flrat * »Tru*. 

440 Continue 

c 
c 

C.&aad A rule 
C 

Call R«ad_anat_rul*_parBms { Firat r *4o_nore > 
25 If < Motors ) Co To 450 

C 

Call StrStMm < An^cond^neme , An_cond w nane , Len > 
Call $tr*tri« < An^rule^nase , An_rui«_na»* , Hon > 
Writ© < tode^lun , 441 > ( Anj"ule_r*ame<1 s ILen) , J »1 # 2 ) 
If ( An_cond_n«*e .eq. La*t_cond ) Go To 440 
Laat_eond * An_cond_naiaa 

Write < Code^lun f 442 ) < An_cond_na»e<1 :Len) , J ) 

441 Femat < 
1 , / , 

1 , A , ' rule Ini t UHxatfoft* # / „ 

1 'C , / . 

1 * 1 # A , '^fired * -Fata*.* > 

442 Foraat C 

40 1 1 * , A # *_8tat » unknown 1 ) 

C 

Co To 440 

C 

450 Contlnu* 

C Initialize- action rulea 

C 

Flrat » ,True. 
460 Continue 

C 

c 

C.Read A rule 
C 

55 Call *ead_*etion w njte_param* c Mrat , Ho_m©re ) 
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If < fco^wor* ) Go To 490 

C 

Call Str&tHw < Ac_ruie_n»»» , Ac^rut a_ne»* # Len > 
5 Writ* C Coda^tun , 46t > ( Ac_rut e^nameC 1 :len> , J *1,2 > 

461 Format ( 

1 'C , / , 

1 'C**., 1 , A , 1 rule fni till Uatton' , / # 
1 'C» , / , 

io 1 ' * , A * 'J'frad • -False** > 

C 

Go To 460 
490 Continue 

C . 

500 Contfnu* 

c 

C.tfrfT* the rule code 

C 

UHte C Code^lun , S01 > 

501 Format ( 

1 *C , / , 

1 9 1 Continue* , / , 
1 *C , / , 

25 1 6 Thi»_pssa_f i re» * 0* , J r 

1 *C* 
1 > 

c 
c 

30 C ♦write out variable rule code 



IB 



20 



35 



SO 



First * .True* 
502 Continue 



C 

C» .Seed A rule 
C 



40 

c 
c 

45 C 



Call ftead_vftr_pul«„param$ < First , Wo_more > 

If < «o_n>ore ) Go To 600 

Call StrStrtR* ( Rute^name , feule_nfe»e , ten > 

If t Age^iimft .eq. Slftpty ) Aoe_timit » -565*24*60*60 



Write < Code^lun f 299 ) < RuUjwb*< 1 s t«r»), J*1 ,3) , Abs(Aae_Umit) , 
1 { *ule_name(1$len>, J*1,2> 
299 Format t 

1 *C< , / , 

1 , A , * fctAes * , / , 

1 'C , / , 

1 1 If < ' , / 

1 1 1 C 1 , A f *_astat .eq. Unknown ) .and. 1 , / t 
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10 



1 * 1 ( 1 , A , *„ag« 1 , 1 . * > * * / , 

1 * 1 > Then « , / , 

1 * * t A , '_a»tet » QIC • , / . 

1 *d Wrlt*<6,*> <4 * , A , «_»ge is OK.' 1 * , / , 

1 ' ThU_pa*»^f ires * This_pas*_f ires ♦!*,/, 

1 ' End If' 

1 ) 

Writs ( Codt^iun # Fwt*29a > ( «ute_na»eO : I en) , J*1 ,2) , AbsCAge^t i»i t ) , 



15 



20 



25 



29a 



Format < 



1 
1 

1 
1 
1 
1 
1 
1 
1 

1 ) 



f 1 * A , '^astat ,*q. Unknown ) .and, ' , / , 
t 1 , A f -^ag* „gt* * * / , 

} Then * , i t 
8 , A , ' w astat * Too^old* , / , 
Write<6,*> '»* , A , *_age is Too_oLd.**' , / , 
Thts^pass^f iras « This^pass_f iraa ♦ t» , / , 
End If 



30 



35 



40 



YMtef code^lun , 505 ) <Ruie^narae<l : ten), J*1 ,3) , Log_op1 , Limiti , 

1 ftule_nense< 1 : ten} g Status! , Rule^nawset 1 : ien) , 

t Status 1 , Rute^naroedtien) 

505 Format < 

1 'C* , / , 

1 ' If < * , / , 

1 1 1 < ►not. ' , A t ( _fi red ) .and* 1 , / , 

1 • 1 < 1 , A # '_astat .eq. OIC > .and* 1 , / , 

1 ' 1 C 1 , A , Rvalue ■ , A4 , » • , M2.5 , 1 > 1 0 / , 

1 1 1 > then » , / , 

1 * 1 , A , *_stat » A25 ,*'**,/ , 

1 *d WriteCo,*) . A 4 ^stat is • , A ,•»•* # / , 

1 1 * , A t '^fired * .True* 1 , / , 

1 1 Thi s^pa&s^f i res * Th i *^pass_f i res * 1* 4 / , 

1 1 End H' 

1 > 



45 



BO 



55 



WHte( coda_tun f 506 > <Rui e_name(t : Un) , J*1 # 3> f Log^opS , tifflttS , 
1 Rule_name( 1 : ten) , $t*ttt»& # aule_name< t : len) t 

1 Staru&S ( Rute w name(1 : ten) 

506 format < 

1 »C» , / # 

1 * If < 4 , / - 

1 * 1 < .not. 1 , A , « - fired ) .and. * , / t 

1 1 1 < * , A , *^astat <aq, OK ) .and. 1 t / t 

^ 1 1 ( * i A , Rvalue 1 , A4 # " » , FU.5 - 1 > » 4 / # 

1 1 t > Then ■ # / # 
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10 



15 



20 



25 



30 



35 



t 

c 



508 



c 
c 



509 



45 



SO 



55 



1 * 

1 'd 
1 ■ 
1 • 
1 4 
t > 



1 , a r *_«t*t * aes , / , 

Wr!te<6 ( *> "« , A , a .»t»t U • , A , / , 

1 . * # '^.fi red » .True. ■ r / , 
ThU_pai;*_f *ra» « ThUj>e**_f ire* ♦ 1* . / , 
End if 



If ( $tettf*2 .ne. ■ 



■ > Then 



WriteC codejun , SOB > Cftule^naaeO: ten), J»1 ,3) , lofi_op2 , LlmU2 



1 
1 

ForiMt 

1 «C ( 

1 ' 

1 ■ 

1 ' 

1 
1 

1 
1 
1 
1 

1 ) 

End If 



*ut*..na»e<1:len} , Statu*2 , auUjnamet t : Un> 
status? . Rule nim(t:ttn) 



/ . 
If C 
1 



i 
t 

»d 
t 

i 
• 



,not. 

1 , * . 

1 * A , 

) Then 1 
■ , A , *_*t*t 
UMte(6 r *) »»■ 



A „ *J\r*6 ) .and. ■ , / p 
astat OK } .and. 1 f / 

value 1 , A4 , " * , M2.5 ( 
yaldt 4 , A4 ( ■ ' , M2.5 , 
, / . 

In . A2S t / f 

l , ■ atat 1s * # A , ' * ' « 



.end. 



1 # A , >_fired * .True.* , / # 
This^pafrs^f ires * ThU_pi$$_f i res + V 
End If* 



If ( St*tu&4 .ne. 



* ) Then 



mat 



Wrf ta< 

1 

1 

1 

Fo 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 

1 > 

End If 



codejun , 509 > { Ru I & m naret <1ilen) r J*1 t l5) # Log_op4 , LttnU4 
ftule_name<1 ; len) , tog_op5 , UroitS , 
Rule^nemeO ; len) , Statu»4 , Rute_naroe(1 : ien> , 
StatueA . Rule namaO:ien> 



f t 1 , / , 

( .net. * , A , *_fireti > .end. * , / , 
< 1 t * # »_a*tat OK > .and* * , / , 

i " , A f Rvalue 1 , A4 f • • f F12.5 , 
C 1 , A , »^vaiya 1 # A4 , • * , F12.5 , 
) Then * , / # 
» , A , '^stat » • • A25 # ' 1 . / t 
WriteC6 r *> "* , A , *^*tat It • , A 
• , A , 'Jired » •True.' , / , 
Thla^pBBS^f ire* » Thi a^pe&s^f i res * V , / 
End Jf» 



) .and, 1 , / 
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55 



C 

c 



]f < Status* .ne. * 



511 



HriteC codejun f 511 ) < Rut «_na»e< 1 i ten), J*1 ,3) 
Rule^naeieClsUn) # to« w op7 , limit? , 
Rulejwaed : ten) # Statu** $ Rut a^naaeC 1 : L en) 
Status* , Rute^nanecl: tan) 

oraat C 



> Then 

Lo9_op6 , Limit 6 



■c* 


. / 


* 








1 


If 


< • . / , 










1 


< .not. * » A , ^ftrad ) 


.and. 


' , / , 




1 


1 


< * , A , »_e*tat .*q. OK 


> .an 


«.',/. 




1 


1 


< * ♦ A t * w vetua * t , 


f i 


. M2.5 , • 


) .and 


1 


1 


< • # A , Rvalue » # A4 , 


i » 


. M2.5 , ' 


) * * 


1 


1 


) Th*n ' , / . 








i 




' * A , ■jrtat 111 A25 , • 


« • R 

r 


/ , 




'd 




Write<6,*) * * * , A , '_*tat 


is • 


A * * t 1 




» 




* # A , «_Hred * .True.' , 


/ , 







This^pasa^f ire* * Thi s_pass_f i rea + 1* 
End If* 



600 



Erw| if 
Co To 502 
Cont i nue 



C**. Write out calculation rule code 

c 

Call fefri te^calc^rutes 

C 

C** -Write out analysis rule code 
C 

First » .True. 

C 

602 Continue 

C 

C» .Read A rule 
€ 



699 



Call ftead_anal_rute_pararas C first , *io_tiore ) 
If t »o_»ore > Go To 700 



Call StrStrim ( An_cond^name , An_cond_narce t ten ) 

Call Str*tri*n ( An^rulejname , An^rulejname , Uen ) 
Write ( Code_lun , 699 ) (An_rutejiame{1 ; I ten), j*l , 2) 
format < 
* f C» , / , 

1 *t....» f A , ■ Rules * , / , 
1 l C , / # 
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10 



is 



20 



1 • 1 ( .not. ' t A # *_fir«tf ) .end. * 
1 > 

C 

If ( An^rutel .fie. * 1 ) Then 

Cell StrttH* < An^rsJiel , An_rule1 , ten ) 

C 

If ( An_nett .eq. ♦♦HOT.' > Then 

WMteC code^lun ( 1001 > An_ruleU1jten) 
End If 
1001 Formt c 

1 » 1 < .not. C 1 , A 0 *_«tat .EQ« Unknown ) > .end.* 

1 ) 

Urite< code_lun f 608 ) An_r*ot1 t Aiw-uleU \ i len> f 
1 An_stetus1 
605 Foraat ( 

1 1 1 < ' , A , > C * , A , »_»tet 1 ' 1 „ A , * 1 * ) ) .and. 



1 > 

End If 

2$ C 

Jf < An_rute2 .n*. 1 1 ) Then 

Cell StrStriifi ( An_.ru I e2 , An^rwleS , ten ) 

C 

If ( An_not2 ,eq. ».80T.' > Then 
30 WriteC code^lun , 1001 > An_rule2n s ten) 

End if 

Write* code_iun , 60£ ) An_not2 , An_ruLe2< 1 : ten) , 
1 An_etatu&2 
609 Format ( 

3S 

1 ' 1 < • , A * 1 t 1 , A , »_«tet *EQ» , A . 1,1 ) > .and. 4 



1 ) 

End If 

C 

If ( An^ruteS .ne. > » ) Then 

Celt StrftrSra ( An_rute3 , Ah_rule3 , ten ) 

C 

if C An_not3 *eq, •.NOT.* ) Then 

VHteC eode_lun , 1001 > An_rule5<1 s len) 
End If 

UriteC code^lun # 610 > An_not3 , An^rute3(1 ; ten) , 
1 An_st»tu&3 
610 Format < 

1 ' 1 < ' , A , * < fl , A , *_etat .EC. * • 1 , A f 1 * ' ) ) .and.* 

1 > 

End If 

C 

If < An_rute4 *ne, ■ » > Then 
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20 



25 



45 



50 



Call Str*tH» ( An_rula4 , An_ryU4 t Lan > 

C 

If < An_not4 .aq. ».NOT.' ) Than 

Wr1t*( coda_lun , 1001 ) An_ruU4C 1 s t *n) 
End If 

WrltaC coda^tur* § 611 ) An_not4 , AnjruL*40: l*n> , 
1 An_«tatus4 
611 Format ( 

1 * 1 ( * » A , 1 < * , A # ^»tat *E0, •*• , A , ■•■ ) > .»nd.» 



1 ) 

75 £nd If 

c 

If < An_ruie5 .n*. * * > Than 

Call Strttria < An^ruleS f An^ruteS , Lan ) 

C 

If < An^notS .aq. '.WOT.* ) lhan 

Writ*< eoda^lun , 1001 > An_ruie5( 1 : tan) 
End If 

Write( coda_lun ( 612 > An_not5 , An^rut *5 C 1 : l*n> t 
1 Art_status5 
612 Format < 

1 * 1 C * 4 A , ■ ( • , A f «_*tat .EQ > * * * f A # * 1 f ) > -and. 

1 ) 

50 End If 

C 

CaU StrStritn ( An_cond_name „ An_cend_name , Lan > 
Writa C Code^iun , 613 ) 
3S 1 {An^eond^namtC 1 : lan), j*1 , 1 ) t An_«nd_*tatus , 

1 £An_cond_nam»(1 : l«n), 1 > f An_and_atatua , 
1 CAn^rut*_name(1 : Ii*n) , j»1 , 1 > 
615 Format ( 

1 « 1 ( .Trua. > • , / . 
40 1*1) Than • , / , 

1 1 * , A , '_*t*t - " , t A25 t "" , / , 

1 *d WMte{6,*> 1 1 ' # A , *_atat i« « , A , » < 1 * , / , 

1 * ThU_pa»»_f ire* * Th U^p§as_f i ra$ +1* , / ( 

1 1 End If* 
1 > 



Go To 602 
700 Cont i nua 



C 
C 

C*.„Urita out action rule coda 
C 

55 Mrat ■ .Try*. 

C 
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75 



20 



30 



SO 



55 



702 Cont 1 r*u« 

C 

C« «8**d A ruU 

e 



Call *»ad_actior*_rute_paraaia t Hrat # 84o_ajore 3 
if < ttojttore ) Co To 000 



C 

ro C 



Catt Strftrins < Ac_rwl*_r*ame , Ae_rut©_ne*e , Lan > 
Writ* C toda^tun f 799 > (Ac^rut O : Un), j«1 ,2> 
799 Fornat < 

1 . / , 

1 'C^.,* , A , ■ ftgla* ' , / , 

1 *C» , / , 

1 1 If C " , / , 

1 * 1 ( .not. * , A , *_fi red ) -and. * 
1 ) 



CaU StrStrim € Ac_rute1 , Ae_ruU1 t ten > 



writec eode_lun , 708 } Ae^rutaU t s ten) , 
25 1 Ac^statust 

70S Format < 

1 • 1 C 1 , 4 < 1 » A , l _«tat .EQ. »■• , A ( ) > 

1 ) 



Cat! StrStrim ( Ac^rule^nam* t Ac^rut«_narae r t«r> > 
write t Code_lun , 713 > (Ac^ruia^nameC 1 : len> , j«1 ,2) 
713 format < 
35 1*1) Then ■ , / , 

1 *d WMt*(6,*) "Doing action rule ■ , A , ** • ■ , / , 

1 ■ 1 , A , '^fired * -True,* , / , 

1 1 Thi& pass fires « This pas$_*ire* + 1* 

1 > 

C 

Catt Strstrim ( Ac^data^line , Acjiata^Une # Len > 
If < Iac_type .eq. Exac^f ort^atatement > Than 
Writ* ( code_lun , 7U ) Ac_d»ta_l ine(1 :t*rO 
45 7H Format ( 

1 * * * A 

1 ) 

Et*» If < Iac_typ» .aq. Exec^dc [^procedure 5 Than 
Subproeec«_namt<L_*p:U) « Ae_rule^name 

Call StrStHm < Subproce**_name , $ubproce**_naroe , Jltn ) 
Write < code^lun , 715 ) Ac^data^l ineC 1 :ten) , 
1 Subproces*_name( 1 ; Hen) 

715 Format { 

1 1 Call lib*apawn t « t A , « » ■ , , , , » • * , A , ,,,,, 
1 ) 
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35 



40 



718 

* 9 9 $ ) ' 

787 



789 



766 



El »• If < lac^type *eq. S*nd_vax»ai lje«« > Then 
Call StrStM* ( Ae^rule^naa* , Ac_rute_nem* # lan , 
Call $tr*tM* < Directory , Directory , L^dlr ) 
Subproce**_nemeU_ip2H) ■ Ae^rul t^nama 

Call Str$tri« < Subproceaa^nam* , 5ubproe*s*_nasne , Ztan ) 
Writ*{Code_iun , 785 > 
Foraat < 

• If ( fcode .ect„ Jpi*k_otber ) Than* 
> 

Write < code_lun , 718 > Di rectory* 1 Hj&i r> , 
Ae^rtil a_name< 1 s I en) t 
Subpr oe at * w naae (1 : II en J 

format < 

* Call Ub*sp*wn ( , A , A , * Lib a 9 * * , f # , * • ■ # A , 4 



Wri te<Code_lun , 787 > 
Format < 

• £lae if C Mode .«q. Jpi %k_\ nteract i ve ) Than 1 
) 

Write ( Code^lun . 789 ) Di reetoryO :L_di r) , 

Ac^rule^named : len) , Next_label # Next_labei 
M«xt_label * *ext M Ubel * 1 
Format ( 

■ openci1,H le«< 1 » , A , A # '.maUms* 1 ' ,5tatus«' »old* 4 ) 4 ,/ , 

• D« J « 1 # 3 * 
Head < 11 f "(A)" ) Line* 

End Do 1 
Do J » 1,60' 

Read (11 , *»<A}" , End * », H , * > tine • ,/ # 

• WMte(6,«) Line * 
' End 0o» 

14 , " Continue" 

• Close ( 11 > * 



> 



Write(Code_lun , 786 ) 
Format C 
1 End If* 



AS 



50 



Else 

Write ( code^lun , 716 ) 
716 Format < 

1 * Wrlte<6,*> "fted Action type. M * 
1 ) 
End tf 



55 



Write i Code_lun , 717 ) 
717 Format ( 

1 1 End If 1 
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10 



75 



c 

c 



BOO 



20 



1 > 

So To 702 
Continue 



Write* Codejun , 999& 5 
orut e 

•t* WHt*<&,*> TM#_pe»»_f Ires, 1 ■ r«U$ Hr*d this pass.'*' , / , 
1 If C ThU_pas*_f f re« ,et„ 0 > Go To 1« , / , 
■C 1 * / , 

• Saturn' , / , 

all FdvSPutK 1 Generating Expert System cod* Done. 4 ) 

Return 



^5 [0351] Thus, steps such as those listed above will produce (in this example) FORTRAN source code which defines 
an expert system including rules as defined by the user. This source code can then be compiled and linked, as described 
above; to provide an expert procedure which is callable at run-time. This expert procedure is tied into the supervisor 
procedure, as described above, by inserting an appropriate call into the user program section of one of the blocks in 
the supervisor procedure. Thus, the expert procedure can be called under specific circumstances (e.g. if selection 

^0 among several possible manipulated variables must be made), or may optionally be called on every pass of the base 
cycle procedure, or at fixed time intervals, or according to any of the other options set forth above. 
[0352] As will be recognized by those skilled in the art, the novel concepts described in the present application can 
be modified and varied over a tremendous range of applications, and accordingly their scope is not limited except by 
the allowed claims. 

35 



Claims 



1. A computer-based method for operating a substantially continuous process (160), comprising the steps of: 

40 

(i) operating the process (160) with one or more sensors (156) arranged to sense conditions in the process, 
and one or more actuators (158) arranged to change conditions in the process (160); 

(ti) controlling one or more of said actuators (158) with a process controller (154) in accordance with signals 
received from one or more of said sensors and in accordance with one or more control parameters; and 
45 (\\\) running a process supervisor procedure (130) for supervising the operation of said controlling step by 

selectively defining one or more of said control parameters in dependence upon data received indirectly and/ 
or directly from said process; 



characterised by providing a plurality of expert subprocedures (120), each for performing a respective drf- 
50 f erenf expert task relating to the process using a knowledge base and inference structure relevant to the process, 

and for outputting expert advice data; and in that 

said process supervisor procedure (130) runs independently of said controlling step and uses a plurality of 
substantially self-contained software modules, each module defining a procedure for performing a desired task, 
and wherein said process supervisor procedure is arranged to call, under predefined conditions, said expert sub- 
55 procedures (1 20) which output said expert advice data for use by said supervisor procedure in selectively defining 

said one or more control parameters. 

2, The method of claim 1 , wherein said knowledge base and inference structure run a substantially reakime expert 
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control procedure. 

3, The method of claim 1, wherein said actuators (158) are controlled substantially continuously in real time, and 
wherein one or more of said plurality of expert subprocedures are not run continuously in real time. 

s 

4, The method of claim 1 , wherein said process controller (154) uses real time logic, and wherein one or more of said 
plurality of expert subprocedures (120) are recurrently run as a batch process. 

5, The method of any of claims 1 to 4, wherein said process controller (154) uses analog logic for controlling said 
10 actuators (158). 

6, The method of any preceding claim, wherein at least one of said control parameters comprise a goal of said process 
controller (154). 

is 7. The method of any preceding claim, wherein said process controller (154) comprises a computer system on which 
said process supervisor procedure is run. 

8. The method of any preceding claim, wherein said process controller (154) and said process supervisor procedure 
(1 30) are part of the same software system. 

20 

9. The method of any preceding claim, including selectively presenting to a user a functional structure for a new rule 
for a selected one of said expert subprocedures (1 20) and/or a functional structure corresponding to the user input 
from which a current version of said expert subprocedure (120) was generated, and selectively compiling one or 
more user inputs from said functional structure into a new version of said selected expert subprocedure (120). 

25 

10. The method of claim 9, wherein said functional structure for said expert subprocedure (120) includes standardised 
data interface definitions such that the user can specify data having one of plural pre-defined temporal character- 
istics. 

so 11 . The method of claim 9 or 10, wherein said functional structure for said expert subprocedure (1 20) uses a substan- 
tially natural language format. 

12, The method of claim 10 or 11 , wherein said functional structure for said expert subprocedure (120) uses a sub- 
stantially natural language format which is readily understandable by a user who is technically skilled in a prede- 

35 termined art but who is not necessarily competent in any computer language. 

13. The method of any of claims 9 to 12, wherein said functional structure for said expert subprocedure (120} includes 
user-alterable portions which appear differently to said user than do other portions of said functional structure. 

40 14. The method of any of claims 9 to 12, wherein only restricted portions of said functional structure for said expert 
subprocedure (120) allow for user alterabiiity. 

15. The method of claim 14, wherein said user-alterable portions of said functional structures appear differently to said 
user than do other portions of said functional structures. 

4B 

16. The method ol any preceding claim, including selectively presenting functional structures, to a user, lor a new 
software module for said process supervisor procedure (1 30) and/or a functional structure corresponding to a user 
input from which a current software module of said process supervisor procedure (130) was generated, and se~ 
lectively loading the user input from said functional structure to be used by said process supervisor procedure (1 30). 

bo 

1 7. The method of claim 1 6, wherein respective data definitions comprise the step of defining said one or more software 
modules including pointers to procedures which will carry out a respective function, and, for at least some of said 
software modules, parameters to be passed to said procedures pointed to. 

^5 is. The methodof claim 16, wherein respective data definitions comprise the step of defining said one or more software 
modules including pointers to procedures which will carry out a respective function, wherein most of said proce- 
dures pointed to correspond generally to one of a limited number of procedure types, and wherein at least some 
of said procedures pointed to also contain further pointers to procedures which do not correspond generally to any 
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one of said limited number of procedure types, and, for at least some of said software modules, parameters to be 
passed to said procedures pointed to. 

19. The method of any preceding claim, including using an historical database (140} containing at least one time- 
£ stamped data regarding the process, wherein said supervisor procedure {1 30) or said expert subprocedure (1 20) 

fetch at least one value from said historical database (140). 

20. A method according to any preceding claim, wherein said control parameters indicate a respective threshold, 
wherein attainment of said threshold as indicated by signals from said one or more sensors (156) creates an indicia 

10 for action and wherein said process supervisor procedure (1 30) is constrained not to make changes to said control 

parameters unless the indicia for action has been created. 

21. The method according \o any preceding claim, wherein said process supervisor procedure (130) reports every 
instance where it changes a control parameter. 

is 

22. A method for buiiding an expert subprocedure (1 20) in a method according to any preceding claim comprising the 
steps of; 

providing to a user functional structures, for rules according to a limited set of predetermined types, in a format 
20 which is readily understandable by a user who is not necessarily competent in any computer language, and 

which is not readily user alterable except in restricted portions thereof; and 

translating user inputs in accordance with said functional structures into a complete executable set of rules 
which defines said expert subprocedure. 

25 23. A method for budding an expert subprocedure in a method according to any of claims 1 to 21 , comprising the steps 
of: 

translating user inputs in accordance with predetermined functional structures into an executable set of rules 
which defines an expert subprocedure; 
so wherein said functional structures provide for only three different rule types, consisting of; 

retrieval rules, respective ones thereof including standards for associating an attribute with an object selectively 
in accordance with input values; 

analysis rules, respective ones thereof comprising logic for associating an attribute with an object selectively 
in accordance with attribute/objects associations defined by other ones of said rules; and 
55 action rules, respective ones thereof comprising logic for selectively executing an external command in ac- 

cordance with object/attribute associations made by other ones of said rule types. 

24. A computer-based apparatus for controlling a substantially continuous process (160), comprising: 

40 (a) one or more sensors (156) for sensing conditions in the process (160), and one or more actuators (158) 

for changing conditions in the process (160); 

(b) a process controller (1 54) for controlling one or more of said actuators (1 58) in accordance with sense data 
generated by at least one of said sensors (156) and in accordance with respective control parameters; and 

(c) process supervisor means (130) arranged to receive data indirectly and/or directly from said process and 
4S operable for supervising the operation of said process controller by selectively defining one or more of said 

control parameters in dependence upon said received data; 

characterised in that a plurality of expert subprocedure means (120) are provided, each for performing a 
respective different expert task relating to the process using a knowledge base and inference structure relevant 
so to the process and for outputting expert advice data; and in that 

said process supervisor means (130) is operable independently of said process controller (154) and com* 
prises: (i) a plurality of substantially self-contained software modules, each module defining a procedure for per- 
forming a desired task; and (ii) means for calling, under predefined conditions, at least one of said plurality of 
expert subprocedure means which outputs said expert advice data for use by said process supervisor means (1 30) 
55 in selectively defining said one or more control parameters. 

25. The apparatus of claim 24, wherein said process supervisor means (130) has a maximum iteration period signif- 
icantly longer than the maximum iteration period of said process controller. 
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26, The apparatus of claim 24 or claim 25, including an historical database (1 40) containing at least one time-stamped 
data regarding the process. 

27. The apparatus of claim 24, 25 or 26, wherein said process supervisor means {1 30) uses a batch process including 
s a timed dormant state, and the duration of said dormant state is sufficiently large that said batch process does not 

on average occupy more than 50% of the available CPU time of the computer on which said process supervisor 
means (1 30) is run; and wherein the duration of said dormant state is selected to be sufficiently short that process 
fluctuations cannot diverge to an out-of -control situation during the periods when said batch process is dormant 

io 28. The apparatus of claim 24, 25 or 26, wherein said process controller (154) operates substantially continuously in 
real time, and wherein one or more of said expert subprocedure means {120) do not operate continuously in real 
time. 

29. The apparatus of claim 24, 25 or 26, wherein said process controlled comprises real-time logic, and wherein one 
is or more of said expert subprocedure means (120) are recurrently run as batch processes. 

30. The apparatus of any of claims 24 to 29, wherein said plurality of expert subprocedure means (1 20) are configured 
as a computer running one or more programs, including a cycling process which repeatedly samples a plurality of 
signals corresponding to inputs, forms inferences from said inputs according to a stored knowledge base, and 

20 provides outputs in accordance with said inferences, and then goes into a dormant state which has a predetermined 

duration sufficiently large that said process does not on average occupy more than 50% of the available CPU time 
of the computer and sufficiently short that process fluctuations cannot diverge to an out-of-control situation during 
the periods when said expert subprocedure means are dormant. 

31. The apparatus of any of claims 24 to 30, wherein said process controller (154) comprises an analog controller. 

32. The apparatus of any of claims 24 to 31 , wherein one or more of said control parameters is a goal of said process 
controller (154). 

so 33, The apparatus of any of claims 24 to 32, wherein said process controller (1 54) and said process supervisor means 
(130) comprise processes running on the same computer system. 

34. The apparatus of any of claims 24 to 33, wherein said process controller (1 54) and said process supervisor means 
(1 30) are both respective parts of the same software system. 

35 

35. The apparatus of any of claims 24 to 34, wheresn said plurality of software modules are defined by respective data 
definitions, including pointers to first means for carrying out a respective function, and, for at least some of said 
software modules, parameters to be passed to said first means pointed to. 

40 36. The apparatus of any of claims 24 to 34, wherein said plurality of software modules are defined by respective data 
definitions, including pointers to first means for carrying out a respective function, wherein most of said first means 
pointed to correspond generally to one of a limited number of procedure types, and wherein at least some of said 
first means pointed to also contain further pointers to second means which do not correspond generally to any of 
said limited number of procedure types, and, for at leas! some of said software modules, parameters to be passed 

45 to said first means pointed to. 

37. The apparatus of any of claims 24 to 36 r including build-expert means (110) which is configured to: 

(i) upon command, selectively present to a user a functional structure for a new rule for a selected one of said 
50 expert subprocedure means (1 20); 

(ii) upon command, selectively present to a user a functional structure corresponding to the user input from 
which a current version of said expert subprocedure means (120) was generated; 

(ill) and selectively to compile one or more user inputs from said functional structure into a new version of said 
selected expert subprocedure means (120). 



SB 



38. The apparatus of claim 37, wherein said functional structure presented to the user has a substantially natural 
language format which is readily understandable by a user who is technically skilled in a predetermined art but 
who is not necessarily competent in any computer language. 
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39. The apparatus of claim 37 or 38, wherein only restricted portions of said functional structure are user-alterabie. 

40. The apparatus of any of claims 37 to 39 ; wherein said functional structure comprises user-alterable portions which 
appear differently to said user than do other portions of said functional structure. 

5 

41. The apparatus of any of claims 37 to 40, wherein said functional structure uses standardised data interlace defi- 
nitions such that the user can specify data having one of plural pre-defined temporal characteristics. 

42. The apparatus of any of claims 24 to 41 1 including build-supervisor means (810) which is configured to: 

10 

(i) upon command , selectively present to a user a functional structure for a new software module for said 
process supervisor means (130); 

(ii) upon command, present to a user a functional structure corresponding to a user input from which a current 
software module of said process supervisor means (130) was generated; 

1& (Hi) and selectively to load the user input from said functional structure to be used by said process supervisor 

means (130). 

43. The apparatus of claim 42, wherein said build-supervisor means (810) does not allow data corresponding to fresh 
user inputs to become actively accessed by said process supervisor means (1 30) until a validation run has been 

bo performed. 

44. The apparatus of claims 42 or 43, wherein said process supervisor (1 30) means uses means for cycling and said 
process controller (154) runs substantially in real-time. 

2S 45, The apparatus of any of claims 24 to 44 , wherein said knowledge base and inference structure define a substantially 
real-time expert control system (120). 

46. The apparatus of any of claims 24 to 44, wherein said process controller (154) operates substantially continuously 
in real time, and wherein one or more of said expert subprocedure means (120) do not operate continuously in 

so real time. 

47. The apparatus according to any of claims 24 to 44, wherein one or more of said expert subprocedure means (1 20) 
comprises: 

35 a collection of interference rules, consisting of retrieval rules, respective ones thereof including standards for 

associating an attribute with an object selectively in accordance with input values; 

analysis rules, respective ones thereof comprising logic tor associating an attribute with an object selectively 
in accordance with one or more other attributes associated with objects by others of said rules; 
action rules, respective ones thereof comprising logic for executing an external command selectively in ac- 
40 cordance with one or more other attributes associates with objects by others of said rules; 

a processor connected to receive inputs from an input channel, to execute said collection of inference rules 
on said inputs, and to provide outputs on an output channel accordingly, wherein said processor is not con- 
nected to perform any purely arithmetic test while executing said analysis rules nor while executing said action 
rules; 

45 and wherein sard processor is not connected to evaluate any logical expression having three or more input 

terms while executing said action rules. 

48. An apparatus for building an expert subprocedure means (120) in an apparatus according to any of claims 24 to 
47, comprising: 

so 

rule generation logic, which, when activated, provides to a user, via an interactive interface, templates for at 
least three different rule types, including: 

retrieval ruies, respective ones thereof including standards for associating an attribute with an object selectively 
in accordance with input values; 
SB analysis rules, respective ones thereof comprising logic for associating an attribute with an object selectively 

in accordance with other object/attribute associations; and 

action rules, respective ones thereof comprising logic for executing an external command selectively in ac- 
cordance with other object/attribute associations; 
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wherein said respective rules are presented to the user as templates which have a format whfch is readily 
understandable by a user who is not necessarily competent in any computer language; 
wherein only restricted portions of said templates are user-alterable; 

and wherein said rule generation of logic translates user inputs in accordance with said templates into an 
executable set of rules which define said expert subprocedure means (120). 

49. An apparatus for building an expert system in an apparatus according to any of claims 24 to 47, comprising: 

rule generation logic, which when activated provides to a user functional structures for rules according to a 
limited set of predetermined types, wherein said rule generator logic presents said functional structures for all of 
said rules in a format which is readily understandable by a user who is not necessarily competent in any computer 
language, and which is not user-alterable except in restricted portions thereof; and wherein said rule generation 
logic translates user inputs in accordance with said functional structures into a complete executable set of rules 
which defines said expert subprocedure means (120). 



Patentan sprue he 

1. Computerbasiertes Verfahren zum Betrieb eines im wesentlichen kontinuierlichen Prozesses (160) rnitden Schrit- 
ten: 

(i) Betrieb des Prozesses (1 60) mit einem oder mehreren Sensoren (156), die zum Erfassen von Bedingungen 
des Prozesses angeordnet sind, und mit einem oder mehreren Stellgiiedern (158), die zur Anderung der Be- 
dingungen im ProzeB (160) angeordnet sind; 

(il) Steuern des einen oder der mehreren Stellglieder (158) mit einer ProzeBsteuerung (154) in Ubereinstim- 
mung mit Signalen, die von dem einen oder mehreren der Sensoren empfangen werden, und in Ubereinstim- 
mung mit einem oder mehreren Steuerparametern; und 

(iii) Durchfuhren einer ProzeBuberwachungsprozedur (130) zur Qberwachung des Betriebsdes Steuerschritts 
durch selektives Festlegen eines oder mehrerer der Steuerparameter in Abhangigkeit von Daten, die indirekt 
und/oder direkt von dem ProzeB erhaften werden; 

gekennzeichnet durch Vorsehen einer Mehrzahf von Expertenunterprozeduren (1 20)> jeweils zur Durchfuh- 
rung einer jeweiligen unierschiedlichen Expertenaufgabe bezuglich des Prozesses unter Verwendung einer Wis- 
sensdatenbank und einer Verknupfungsstruktur bezOglich des Prozesses, und zur Ausgabe von Expertenanwei- 
sungsdaten; unddadurch, daB 

die ProzeBuberwachungsprozedur (130) unabhangig von dem Steuerschritt lauft und eine Mehrzahi von im 
wesentlichen seibstenthaltenden Softwaremoduien verwendet, wobei jedes Modul eine Prozedur zur Durchfuh- 
rung einer gewunschten Aufgabe festiegt und wobei die ProzeBuberwachungsprozedur angeordnet ist, urn unter 
vorgegebenen Bedingungen die Expertenunterprozeduren (120) aufzurufen, die die Expertenanweisungsdaten 
fur die Verwendung durch die Oberwachungsprozedur beim selektiven Festlegen des einen oder der mehreren 
Steuerparameter ausgeben, 

2. Verfahren nach Anspruch 1, bei dem die Wissensdatenbank und die Verknupfungsstruktur im wesentlichen in 
Echtzeit eine Expertensteuerprozedur durchfuhren. 

3. Verfahren nach Anspruch 1, bei dem die Stellglieder (158) im wesentlichen kontinuierlich in Echtzeit gesteuert 
werden und bei dem eine oder mehrere der Expertenunterprozeduren nicht kontinuierlich in Echtzeit iaufen. 

4. Verfahren nach Anspruch 1, bei dem die ProzeBsteuerung (154) eine Echtzeitlogik verwendet und bei dem eine 
oder mehrere der Expertenunterprozeduren (120) periodisch als ein StapelprozeB durchgefuhrt werden. 

5. Verfahren nach einem der Anspruche 1 bis 4, bei dem die ProzeBsteuerung (1 54) eine analoge Logik zur Steuerung 
der Stellglieder (158) verwendet. 

6. Verfahren nach einem der vorangehenden Anspruche, bei dem zumindest einer der Steuerparameter ein Ziel der 
ProzeBsteuerung (154) umfaflt. 

7. Verfahren nach einem der vorangehenden Anspruche, bei dem die ProzeBsteuerung {154} ein Computersystem 
umfaBt, auf dem die ProzeBuberwachungsprozedur fault 
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8. Verfahren nach einem der vorangehenden Anspruche, bei dem die ProzeBsteuerung (154) und die ProzeBuber- 
wachungsprozedur (130) Teil des gleichen Softwaresystems sind. 

9. Verfahren nach etnem der vorangehenden Anspruche, das einschlieBt: selektives Prasentieren fur einen Benutzer 
5 einer Funktionalstruktur fOr eine neue Regel fur sine ausgewahlte Expertenunterprozedur (120) und/oder einer 

Funktionalstruktur entsprechend einer Benutzereingabe, aus der die laufende Version der Expertenunterprozedur 
(1 20} erzeugt warden, und selektive Kompiiieren einer oder mehrerer Benutzereingaben aus der Funktionalstruktur 
in eine neue Version der ausgewahiten Expertenunterprozedur (120). 

io 10. Verfahren nach Anspruch 9, bei dem die Funktionalstruktur der Expertenunterprozedur (120) standardisierte Da- 
te nschnittstel lendef in ition en enthalt, so daB der Benutzer Dafen mil einer Mehrzahl vorgegebenertemporarer Cha- 
rakteristika spezffizieren kann. 

11. Verfahren nach Anspruch 9 oder 10, beidem die FunktionalstrukturfOr die Expertenunterprozedur (120) ein Format 
15 im wesentiichen in naturiicher Sprache verwendet 

12. Verfahren nach den Anspruchen 10 oder 11 , bei dem die Funktionalstrukrur fur die Expertenunterprozedur (120) 
ein Format im wesentiichen in naturiicher Sprache verwendet, das fur einen Benutzer mit technischer Ausbildung 
auf einem vorgegebenen Gebiet, der nicht notwendigerweise in einer Computersprache geschult ist, leicht ver- 

20 standiich ist. 

13. Verfahren nach einem der Anspruche 9 bis 12, bei dem die FunktionalstrukturfOr die Expertenunterprozedur (120) 
vom Benutzer abanderbare Abschnitte enthalt, die dem Benutzer unterschiedlich zu anderen Abschnitten der 
Funktionalstruktur angezeigt werden. 

25 

14. Verfahren nach einem der AnsprDche 9 bis 12, bei dem nur vorgegebene Abschnitte der Funktionalstruktur der 
Expertenunterprozedur (120) die Anderung durch den Benutzer ermoglichen, 

15. Verfahren nach Anspruch 14, bei dem die vom Benutzer zu andernden Abschnitte der Funktionalstruktur dem 
so Benutzer anders als die anderen Abschnitte der Funktionalstruktur dargesteilt sind T 

16. Verfahren nach einem der vorangehenden Anspruche, das einschlieBt: 

selektives Darstelien fOr einen Benutzer der Funktionalstrukturen fOr ein neues Softwaremoduf fOr die Pro- 
zeBuberwachungsprozedur (1 30) und/oder einer Funktionalstruktur entsprechend einer Benutzereingabe, aus der 
35 ein laufendes Softwaremoduf der ProzeBuberwachungsprozedur (130) erzeugt wurde, und selektives Laden der 

Benutzereingabe aus der Funktionalstruktur zur Verwendung durch die ProzeBuberwachungsprozedur (130). 

17. Verfahren nach Anspruch 16, bei dem jeweilige Datendefinitionen enthalten: den Schritt des Festiegens des einen 
oder mehrerer Softwaremodule, einschiieGlich "Zeiger zu Prozeduren, die eine jeweilige Funktion ausfuhren wer- 

40 den, und zumindest fur einige der Softwaremodule Parameter, die an die angezeigten Prozeduren weiterzuleiten 

sind. 

18. Verfahren nach Anspruch 1S, bei dem jeweilige Datendefinitionen umfassen: den Schritt des Festiegens des einen 
oder mehrerer Softwaremodule, einschlieBlich Zeiger zu Prozeduren, die eine jeweilige Funktion ausfuhren wer- 

4B den, wobei die meisten der angezeigten Prozeduren im aligemeinen einem Typ eines bekannten Satzes von Pro- 

zedurtypen entsprechen und wobei zumindest einige der angezeigten Prozeduren auch weitere Zeiger zu Proze- 
duren enthalten, die nicht allgemein einen der begrenzten Zahl von Prozedurtypen entsprechen, und fur zumindest 
einige der Softwaremodule Parameter, die an diese gezeigte Prozeduren weiterzuiehen sind, 

50 19. Verfahren nach einem der vorangehenden AnsprDche, das die Verwendung einer historischen Datenbank (140) 
einschlieBt, die zumindest ein Zeitmarkendatum bezuglich des Prozesses enthalt, wobei die Uberwachungspro- 
zedur (130) oder die Expertenunterprozedur (120) zumindest einen Wert aus der historischen Datenbank (140) 
holt. 

ss 20, Verfahren nach einem der vorangehenden Anspruche, bei dem die Steuerparameter einen jeweiligen Schweilen- 
wert anzeigen, wobei das von den Signalen des einen oder der rnehreren Sensoren (156) angezeigte Erreichen 
des Schwellenwerts ein Anzeichen fur eine Handlung erzeugt und wobei die ProzeBuberwachungsprozedur (1 30) 
so eingeschrankt ist, daB sie keine Anderung der Steuerparameter vornimmt, falls nicht das Anzeichen fur eine 
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Handlung erzeugt wurde. 

21. Verfahren nach einem der vorangehende Anspruche, bei dem die ProzeBuberwachungsprozedur (1 30) jedesmal 
berichtet, wenn ein Steuerparameter geandert wird. 

22. Verfahren zur Ausbifciung einer Expertenunterprozedur (1 20) in einem Verfahren nach einem der vorangehenden 
AnsprOche mit den Schritten; 

Vorsehen einer Benutzerlunktionaistruktur fur Regeln entsprechend einem begrenzten Satz von vorgegebe- 
nen Typen in einem Format, das leicht von einem Benutzer zu verstehen ist, der nicht notwendigerweise in 
irgendeiner Cornputersprache geschuit ist, und die mit Ausnahme von beschrankten Abschnitten nicht einfach 
vom Benulzer geandert werden kann, und 

Ubersetzen der Benutzereingaben in QbereinstimmLing mit der Funktionalstruktur in einen vollstandig aus- 
fuhrbaren Satz von Regeln, die die Expertenunterprozedur festiegen. 

23. Verfahren zur Ausbildung einer Expertenunterprozedur in einem Verfahren nach einern der Anspruche 1 bis 21 
mit den Schritten: 

Ubersetzen der Benutzereingaben in Ubereinstimmung mit vorgegebenen Funktionalstruktur en in einen aus- 
fuhfbaren Satz von Regeln, die eine Expertenunterprozedur festiegen; 
wobei die F unlet iona Ist rukturen nurdrei verschiedene Regeltypen vorsehen, bestehend aus: 
Wiederhersteflungsregela von denen einige Standards einschlieBen, die seiektiv ein Attribut rnit einem Objekt 
in Ubereinstimmung mit Eingabewerten assoziieren; 

Analyseregeln, von denen einige eine Logik einschlieBen, die seiektiv ein Attribut mit einem Objekt in Uber- 
einstimmung mit Attribut/Objekt-Assoziationen, die von anderen Regeln festgelegt sind, assoziieren; und 
Handlungsregeln, von denen einige eine Logik zur selektiven AusfQbrung eines externen Befehis in Uberein- 
stimmung mit Objekt/Attribut-Assoziationen enthaiten, die von anderen der Regeltypen vorgenommen wur- 
den, 

24. Computerbasierte Vorrichtung zur Steuerung eines im wesentlichen kontinuierlichen Prozesses (160) mit: 

(a) einem Oder mehreren Sensoren (156) zur Erfassung von Bedingungen in dem ProzeB (160) und einem 
Oder mehreren. Stellgliedern (158) zur Anderung der Bedingungen in dem ProzeB (160); 

(b) einer ProzeBsteuerung (1 54) zur Steuerung eines Oder mehrerer der Steflglieder (1 58) in Ubereinstimmung 
mit von dem zumindest einen Sensor (156) erzeugten Sensordaten und in Gbereinstimmung mit jeweiligen 
Steuerparametern; und 

(c) ProzeBuberwachungsmitteln (1 30), die zum direkten und/oder indirekten Empfang von Daten des Prozes- 
ses angeordnet und zur Oberwachung des Betriebs der ProzeBsteuerung betreibbar sind, wobei seiektiv einer 
oder mehrere der Steuerparameter in Abhangigkeit von den emplangenen Daten festgelegt werden; 

dadurch gekennzelehnet, daB eine Mehrzahl von Expert en unterprozedurmittein (120) vorgesehen sind, die 
jewels verschiedene Expertenaufgaben bezugiich des Prozesses mit einer Wissensdatenbank und einer Verknup- 
fungsstruktur bezuglich des Prozesses durchfuhren und Expertenanweisungsdaten auszugeben, und dadurch, 
daB 

das ProzeBOberwachungsmittef (1 30) unabhangig von der ProzeBsteuerung (1 54) betreibbar ist und enthalt: 
(i) eine Mehrzahl im wesentlichen selbstenthaltender Softwaremodule, wobei Jedes Modul eine Prozedur zur Aus- 
f uhrung einer gewunschten Aufgabe festlegt; und (ii) Mittel zum Aufrufen unter vorgegebenen Bedingungen von 
zumindest einees der ExpertenunterprozedurmltteJ, das die Expertenanweisungsdaten fur die Verwendung durch 
das ProzeBuberwachungsmittel (130) fur das selektive Festiegen des einen oder der mehreren Steuerparameter 
ausgibi 

25. Vorrichtung nach Anspruch 24, bei der das ProzeBuberwachungsmittel (130) eine maximale Iterationszeitspanne 
hat, die beachtiich tanger als die maximale Iterationszeitspanne der ProzeBsteuerung ist. 

26. Vorrichtung nach Anspruch 24 oder 25, mil einer historischen Datenbank (1 40), die zumindest ein Zeitmarkenda- 
turn bezuglich des Prozesses enthalt. 

27. Vorrichtung nach Anspruch 24, 25 oder 26, bei der das ProzeBuberwachungsmittel (130) einen StapelprozeB mit 
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10 



einem zeitgesteuerten Ru hezu stand verwendet und die Dauer des Ruhezustands hinreichend lang ist, so daB der 
StapeiprozeB irn Mittel nicht roehrais 50% der zuganglichen CPU~Zeit des Computers benutzt, auf dem das Pro- 
zeBQberwachungsmittel (130) ausgefuhrt wird, und wobei die Dauer des Ruhezustands so hinreichend kurz aus- 
gewahlt wird, daf3 die ProzeBfluktuationen wahrend dieser Zeitspannen, in denen der StapelprozeB in Ruhe ist, 
nicht in eine Situation auBer KontroHe divergieren konnen. 

28. Vorrichtung nach Anspruch 24, 25 Oder 26, bei der die ProzeBsteuerung (154) im wesentlichen konttnuierlich in 
Echtzeit arbeitet und eines oder mehrere der Expertenunterprozedurmittel (120) nicht kontinuierlich in Echtzeit 
arbeiten. 

29. Vorrichtung nach Anspruch 24, 25 oder 26, bei der der gesteuerte ProzeB eine EchtzeitJogik enthalt und eins Oder 
mehrere der Expertenunterprozedurmittel (120) periodisch ais StapelprozeB laufen. 

30. Vorrichtung nach einem der Anspruche 24 oder 29, bei der die Mehrzahl der Expertenunterprozedurmittel (120) 
15 als ein oder mehrere Programme konfiguriert sind, die auf einem Computer laufen, einschlieBlich eines zyklischen 

Prozesses, welcher wiederholt eine Mehrzahl von Signalen entsprechend den Eingaben abtastet, die Eingaben 
entsprechend einer gespeicherten Wissensdatenbank verknQpft werden, und Ausgaben in Ubereinstimmung mst 
den Verknupfungen geliefert werden, und die dann in einen Ruhezustand gent, der eine vorgegebene Dauer hat, 
die hinreichend lang ist, so daB der ProzeB nicht mehr als 50% der zuganglichen CPU-Zeit des Computers ein- 
50 nimmt, und die hinreichend kurz ist, so daB ProzeBfluktuationen wahrend der Zeitspannen, in denen die Exper- 

tenunterprozedurmittel in Ruhe sind, nicht zu einer Situation auBer Kontrolle divergieren konnen. 

31. Vorrichtung nach einem der AnsprOche 24 bis 30, bei dem die ProzeBsteuerung (154) eine Analogsteuerung ent- 
halt. 

25 

32. Vorrichtung nach einem der AnsprOche 24 bis 31, bei der einen oder mehrere der Steuerparameter ein Ziel der 
ProzeBsteuerung (154) sind. 

33. Vorrichtung nach einem der AnsprOche 24 bis 32, bei der die ProzeBsteuerung (154) und das ProzeBuberwa- 
chungsmittel (130) Prozesse trmfassen, die auf dem gleichen Compute rsystem laufen. 

34. Vorrichtung nach einem der AnsprOche 24 bis 33, bei dem die ProzeBsteuerung (154) und die ProzeB uberwa- 
chungsmittel (130) jeweils Teile des gleichen Softwaresystems sind. 

35 35. Vorrichtung nach einem der Anspruche 24 bis 34, bei der die Mehrzahl der Softwaremodule durch jeweilige Da- 
tendefinitionen festgeiegt sind, einschlieBlich Zeigem zu ersten Mitteln zur Ausfuhrung einer jewejjsgen Funktion, 
und - fur zumindest einige der Softwaremodule - durch Parameter, die zu den angezeigten ersten Mitteln durch- 
gelassen werden. 

40 3S, Vorrichtung nach einem der Anspruche 24 bis 34, bei der die Mehrzahl der Softwaremodule durch jeweilige Da- 
tendefinitionen festgeiegt sind, einschlieBlich Zeigern zu ersten Mitteln zur Ausfuhrung einer jeweiligen Funktion, 
wobei die meisten der angezeigten ersten Mittel im allgemeinen einem Typ eines beschrankten Satz von Proze- 
durtypen entsprechen, und wobei zummdest einige der angezeigten ersten Mittel auch weitere Zeiger zu zweiten 
Mitteln enthaJten, die nicht allgemein einem Typ der angezeigten Zahl von Prozedurtypen entsprechen, und fur 

45 zumindest einige der Softwaremodule Parameter, die an die ersten angezeigten Mittei weitergeleitet werden. 

37, Vorrichtung nach einem der Anspruche 24 bis 36 mit Aufbauexpertenmitteln (110), die ausgestaltet sind, um; 

(i) auf Befehl seiektiv einem Benutzer eine Funktionaistruktur fur eine neue Regel fur ein ausgewahftes Ex- 
so pertenunterprozedurmittel (120) zu prasentieren; 

(ii) auf Befehl seiektiv einem Benutzer eine Funktionaistruktur entsprechend der Benutzereingabe zu prasen- 
tieren, von der eine gegenwartige Version des Expertenunterprozedurmfttels (120) erzeugt wurde; 

(iii) und seiektiv eine oder mehrere Benutzereingaben aus der Funktionaistruktur in eine neue Version der 
ausgewahlten Expertenunterprozedurmittel (120) zu kompiiieren. 



55 



38. Vorrichtung nach Anspruch 37, bei der die dem Benutzer prasentierte Funklionafstruktur ein Format im wesentli- 
chen in naturlicher Sprache hat, die von einem Benutzer, der auf einem vorgegebenen Gebiet technisch, aber 
nicht notwendigerweise bezQglich einer Com puterspf ache, geschult ist leicht verstanden werden kann. 



99 



MSDCC1D: <EP 



03259S7B1 1 > 



EP 0 335 957 B1 



39, Vorrichtung nach Anspruch 37 Oder 38, bei der nur beschrankte Teste der Funktionaistruktur vorn Benutzer zu 
andern sind. 

40, Vorrichtung nach einem der AnsprQche 37 bis 39, bei der die Funktionaistruktur vom Benutzer zu andernde Ab- 
s schnitte aufweisi, die dem Benutzer anders ais andere Abschnitte der Funktionaistruktur dargestellt werden. 

41. Vorrichtung nach einem der Anspruche 37 bis 40 N bei der die Funktionaistruktur standard isierte Datenschnittstel- 
iendefinitionen verwendet, so daB der Benutzer die Daten mittels eines oder mehrerer vorgegebener temporarer 
Charakteristika spezifizieren kann. 

10 

42. Vorrichtung nach einem der Anspruche 24 bis 41 1 mit Aufbauuberwachungsmittein (81 0), die ausgestaltet sind, um: 

(i) auf Sefehl selektiv einem Benutzer eine Funktionaistruktur fur ein neues Softwaremodut fur das 
ProzeBOberwachungsmittel (1 30) zu prasentieren; 
15 (if) auf Befehl einem Benutzer eine Funktionaistruktur entsprechend einer Benutzeresngabe zuprasentieren, 

atis der ein gegenwartiges Softwaremodul des ProzeBuberwachungsmittels (130) erzeugt wurde; und 
(iii) selektiv die Benutzereingabe aus der funktionalen Struktur zur Verwendung dutch das ProzeBuberwa- 
chungsmittef (130) zu laden. 

20 43. Vorrichtung nach Anspruch 42, bei der das Aufbauuberwachungsmiltel (810) es nicht erlaubt, daB Daten, die 
frischen Benutzereingaben entsprechen, akttvvon dem ProzeBuberwachungsmittel (130) zugegriffen werden, bis 
ein Guitigkeitsdurchlauf durchgefuhrt ist. 

44. Vorrichtung nach den Anspruchen 42 oder 43, bei der das ProzeBuberwachungsmittel (1 30) Mittel zum zyklischen 
25 Durchiauf verwendet und wobei die ProzeBsteuerung (154) im wesentlichen in Echtzeit iauft 

45. Vorrichtung nach einem der Anspruche 24 bis 44, bei der die Wissensdatenbank und die Verknupfungsstruktur 
ein im wesentlichen Echtzeit-E Xpert ensteuersy stem (120) festlegen. 

30 46. Vorrichtung nach einem der Anspruche 24 bis 44, bei der die ProzeBsteuerung (154) im wesentlichen kontinulerlich 
in Echtzeit arbeitet und eines oder mehrere der Experienunterprozedur mittel (120) nicht in Echtzeit arbeiten. 

47. Vorrichtung nach einem der Anspruche 24 bis 44, bei der eines oder mehrere der Expertenunterprozedurmitte! 
(120) aufweisen: 

35 

eine Ansammlung von Verknupfungsregeln, die aus Wiederherstellungsregein bestehen> von denen einige 
Standards fur die Assoziierung von Attributen selektiv mit einem Objekt in Obereinstimmung mit Eingabewer- 
ten enthaiten; 

Analyseregeln, von denen einige eine Logik zur Assoziierung von Attributen selektiv mit einem Objekt in Ober- 
einstimmung mit einem oder mehreren Attributen enthaiten, die mit Objekten durch andere Regein assoziiert 
sind; 

Handlungsregeln, von denen einige eine Logik enthaiten, um einen externen Betehf selektiv in Obereinstim- 
mung mit einem oder mehreren Attribut-Assoziationen mit Objekten durch andere der Regein auszufuhren; 
einem Prozessor, der zum Empfang von Eingaben von einem Eingabekanal geschaltet ist, um die Anwendung 
45 von Verknupfungsregeln bezuglich der Eingaben durchzufuhren und um dem entsprechend Ausgaben an ei- 

nen Ausgabekanai zu iiefern, wobei der Prozessor nicht geschaltet wird, um reine arithmettsche Tests durch- 
zufuhren, wahrend er die Analyse regein oder die Handlungsregeln ausfQhrt; 

und wobei der Prozessor nicht geschaltet wird, um irgendwelche logischen Ausdrucke zu bewerten, die drei 
oder mehr Eingangsbegriffe haben, wahrend er die Handlungsregeln ausfQhrt. 

so 

48. Vorrichtung zur Ausbildung eines Experienunterprozedurmittefs (120) in einer Vorrichtung nach einem der Anspru- 
che 24 bis 47 mit: 

einer Regelerzeugungslogik, die bei Aktivierung durch einem Benutzer Ober eine interaktive Schnittstefte 
55 Schabionen fur zumindest drei verschiedene Regeftypen liefert, die enthaiten: 

Wiederherstellungsregein, von denen einige Standards zur Assoziierung von Attributen selektiv mit einem 
Objekt in Obereinstimmung mit Eingabewerten enthaiten; 

Analyseregeln, von denen einige eine Logik zur Assoziierung von Attributen selektiv mit einem Objekt in Ober- 
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einstimmung mit anderen Objekt/Attribut-Assoziationen enthalten; und 

Handlungsregeln, von denen einige eine Logjk zur Ausfuhrung eines externen Befehls selektiv in Oberein- 
stimmung mit anderen Objekt/Attribut-Assoziationen enthalten; 

wobei die jeweiiigen Regeln dem Benutzer als Schablone prasentiert werden, die ein Format haben, das leicht 
von einern Benutzer verstanden werden kann, der nicht notwendigerweise in irgendetner Computersprache 
geschult ist; 

wobei nur beschfankte Abschnitle der Schablonen vom Benutzer anderbar sind; 

und wobei die Regelerzeugungder Logik Beoutzereingaben in Ubereinstirnmung mit den Schablonen in einen 
ausfuhrbaren Satz an Regeln Obersetzt, die das Expertenunterprozedurmiitel (120) festlegen. 

49. Vorrichtung zur Ausbildung eines Expertensystems in etner Vorrichtung nach einem der Anspruche 24 bis 47 mit: 
einer Regeferzeugungslogik, die bel Aktivierung an einen Benutzer Funktionalstrukturen fur Regeln entspre- 
chend einem beschrankten Satz an vorgegebenen Typen liefert, wobei die Regeferzeugungslogikdie Funktionaf- 
struktur fur aiie Regeln in einem Format prasentiert, das leicht von einem Benutzer verstanden werden kann, der 
nicht notwendigerweise in einer Computersprache geschuft ist, und das vom Benutzer mit Ausnahme von be- 
schrankten Abschnitten nicht geandert werden kann, und wobei die Regelerzeugungsiogik die Benutzereingaben 
in Ubereinstirnmung mit der Funktionalstruktur in einen vollstandig ausfuhrbaren Satz an Regeln umsetzt, die das 
Expertenunterprozedurmitte! (120) festlegen. 



Revendications 

1. Un procecle informatique pour rexpfoitation d f un processus sensiblement continu (160), comprenant les etapes 
consistent : 

(i) a exploiter le processus (160) avec un ou plusieurs capteurs (156) agences pour capterdes conditions du 
processus, et un ou plusieurs organes d'actionnement (1 58) agences pour varier des conditions du processus 
(160)1 

(ii) a commander un ou plusieurs des organes d'actionnement (158) au rnoyen d'un contrSleur de processus 
(154) en correspondance a des signaux rectis a partir d'un ou de plusieurs capteurs et en correspondance a 
un ou plusieurs parametres de commande ; et 

(?ii) a executer une procedure de supervision du processus (1 30) pour surveiiler le foncttonnement de ladite 
etape de commande en definissant de facon selective un ou plusieurs desdits parametres de commande en 
fonction des donnees recues directement et/ou indirectement dud it processus ; 

caracteris£ par la mise a disposition d'une plurafite de sous -procedures expertes (120), chacune pour exe- 
cuter une tache experte respectivement different© concernant le processus., utifisant une base de connaissance 
et une structure d'inference concernant le processus, et pour fournir en sortie des donnees de conseif d'expert: 
et en ce que 

ladite procedure de supervision du processus (1 30) s'execute independamment de ladite etape de comman- 
de et utilise une plural ite de modules logiciels sensiblement autonomes, chaque module definissant une procedure 
pour la realisation d'une tache souhaitee, el dans lequel ladite procedure de supervision du processus est agencee 
pour appeler, sous des conditions predefinies, iesdites sous-procedures expertes (120) qui fournissent en sortie 
iesdites donnees de conseii d'expert pour utilisation par ladite procedure de supervision dans ia definition selective 
desdits un ou plusieurs parametres de commande. 

2. Le precede de la revendication 1, dans lequet ladite base de connaissance et la structure deference executant 
une procedure de commande experte sensiblement en temps reel. 

3. Le procede de la revendication 1 , dans fequel lesdits organes d'actionnement (1 58) sont cornmandes sensiblement 
en continu, en temps reel, et dans lequel une ou plusieurs de iadite pluratit§ de sous-procedures expertes ne 
s'executent pas en continu en temps reel, 

4. Le precede de ia revendication 1 1 dans lequel ledit controieur de processus (154) utilise de la logique temps reel, 
et dans lequel une ou plusieurs de ladite pluralite de sous-procedures expertes (120) sont executees de facon 
recurrente en tant que traitement par lots. 

5. Le procede selon I'une quelconque des revendications 1 a 4, dans lequel ledit contrdieur de processus (1 54) utilise 
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de ia logique anaiogique pour la commande desdits organes d'actionnement (158). 

& Le procede selon I'une quelconque des revendications precedentes dans lequef au moins un desdits parametres 
de commande comprend un but ou arte vaieur cible dudit controieur de processus (1 54). 

7. Le procede selon I'une quelconque des revendications precedentes dans lequel ledit controieur de processus 
(154) comprend un systems informatlque sur lequel s'execute ladite procedure de supervision de processus. 

8. Le procede selon Tune quelconque des revendications precedentes dans lequel ledit contraieur de processus 
(154) et ladite procedure de supervision de processus (130) font partie du merne systems logiciel. 

9. Le procede selon Vune quelconque des revendications precedentes cornprenant la presentation a un utilisateur, 
de facon selective, une structure fonctionnelle pour une nouvelie regie pour une sous-procedure seiectionnee 
parmi lesdites sous-procedures expertes (120) et/ou une structure fonctionnelle correspondent a I'entree fournie 
par I'utilisateur a partir de iaquelle une version actuelle de ladjte sous-procedure experts (120) a ete generee, et 
la compilation selective d'une ou de plusieurs entrees lournies par I'utilisateur a partirde ladite structure fonction- 
nelle pour donner une nouvelie version de ladite sous-procedure experte seiectionnee {120). 

10. Le procede de \a revendication 9, dans lequel ladite structure fonctionneNe pour ladite sous-procedure experte 
(1 20) comprend des definitions standardises d'une interface de donnees de sorte que I'utilisateur puisse specifier 
des donnees presentant une caracteristique parmi une plurafite de caracteristiques temporelles predefinies. 

11. Le procede de la revendication 9 ou 10, dans lequel ladite structure fonctionnelle pour ladite sous-procedure 
experte (120) utilise un lormat sensibiement en langage nature!. 

12. Le procede de la revendication 10 ou 11, dans lequel ladite structure fonctionnelle pour ladite sous-procedure 
experte (1 20) utilise un format sensibiement en iangage nature! qui est fakement comprehensible par un utilisateur 
qui possede des aptitudes techniques dans un art predetermine mais qui n'est pas forcement competent dans un 
langage informatique quelconque. 

13. Le procede seion I'une quelconque des revendications 9 a 1 2, dans lequel ladite structure fonctionnelle pour ladite 
sous-procedure experte (120) comprend des parties susceptibles d'etre variees par I'utilisateur qui apparaissent 
difleremment audit utilisateur par rapport a d'aut res parties de ladite structure fonctionnelle. 

14. Le procede selon I'une quelconque des revendications 9 a 12, dans lequel uniquement des parties Hmitees de 
ladite structure fonctionnelle pour ladite sous-procedure experte (120) permettent ia possibilite de variation par 
Tutilisateur. 

15. Le procede de la revendication 1 4, dans lequel lesdites parties susceptibles d'etre variees par Tutsi isateur desdites 
structures fonctionnelles apparaissent djfferemment a I'utilisateur par rapport a d'autres parties desdites structures 
fonctionnelles. 

16. Le procede selon Pune quelconque des revendications precedentes cornprenant ia presentation de facon selective 
de structures fonctionnelles a un utilisaleur pour un nouveau module logiciel pour ladite procedure de supervision 
de processus (1 30) et/ou une structure fonctionnelle correspondante a une entree fournie par I'utilisateur a partir 
de Iaquelle un module logiciel actuel de ladite procedure de supervision de processus (130) a ete genere, et le 
chargement selectif de I'entree fournie par Tutilisateur a partir de ladite structure fonctionneHe, pour utilisation par 
ladite procedure de supervision de processus (130). 

17. Le procede de la revendication 16, dans lequel les definitions respectives des donnees comprennent Tetape con- 
sistant a definir un parmi lesdits un ou plusieurs modules logic i els cornprenant des points urs vers des procedures 
qui vont effectuer une fonction respective, et f en ce qui concerne au moins certains des modules logiciels, des 
parametres a passer auxdites procedures indiqu&es par les pointeurs. 

18. Le procede de la revendication 16, dans lequel des definitions respectives des donnees comprennent Petape 
consistant a definir un parmi lesdits un ou plusieurs modules logiciels cornprenant des pointeurs vers des proce- 
dures qui vont effectuer une fonction respective, dans lequel la pfupart desdites procedures referencees par les 
pointeurs correspondent generalement a un parmi un nombre limits de types de procedure, et dans lequel au 
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moins certaines desdites procedures referencees par pointeur, contiennent egalement des pointeurs supplement 
taires vers des procedures qui ne correspondent pas generalement a aucun parmi iedit nombre Nmit£ de types de 
procedure et, en ce qui concerns au moins certains desdits modules logiciels, des parametres k passer vers 
lesdites procedures referencees par pointeur. 

5 

1 9. Le procede selon I'une quelconque des revendications precedentes cornprenant f'utilisatton d'une base de donnees 
historiques (140) contenantau moins une donnee horodatee concernant ie processus, dans iequel ladite procedure 
de supervision (1 30) ou ladite sous-procedure experte (1 20) recherche au moins une vaieur k partir de ladite hase 
de donnees historiques (140). 

w 

20. Un procede selon I'une quelconque des revendications precedentes, dans lequef lesdits parametres de commande 
indiquent un seuil respectif, dans Iequel le fail d'avoir atteint Iedit seuil, comme indiqu£ par des signaux a partir 
dudit un ou plusieurs capteurs (1 56) cree un indice pour des actions, et dans Iequel ladite procedure de supervision 
de processus (130) est contrainte k ne pas effectuer des changements desdits parametres de commande sauf 

1$ dans le cas ou les indices pour Taction ont £t6 crees. 

21. Le procede selon I'une quelconque des revendications precedentes, dans iequel ladHe procedure de supervision 
de processus (130) emet un cornpte-rendu a chaque fois ou elle change un parametre de commande, 



20 22. Un procede pour creer une sous-procedure experte (120) dans un procede selon Tune quelconque des revendi- 
cations precedentes, cornprenant les etapes consistant a fournir a un utilisateur, des structures fonctionnelles, 
pour des regies en fonction d*un Jeu limite de types predetermines, dans un format qui est faciiement comprehen- 
sible par un utilisateur qui n'est pas forcement competent dans un langage informatique quelconque, et qui n'est 
pas facilement susceptible d'etre change par rutilisateur sauf dans des parties limitees de la structure; et 

25 a traduire des entrees fournies par J'utifisateur en correspondance auxdites structures fonctionnelles en un 

jeu complet executable de regies qui definissent ladite sous-procedure experte, 



23, Un procede pour realiser une sous-procedure experte dans un procede selon I'une quelconque des revendications 
1 h 21, cornprenant les etapes consistant : 

a traduire les entrees fournies par rutilisateur en correspondence k des structures fonctionnelles predetermi- 
nes en un jeu de regies executables qui definissent une sous-procedure experte ; 

dans Iequel lesdites structures fonctionneifes n'admettent que trois differents types de regies unlquement, 
consistant en : 

35 

des regies d'extraction dont certain es comprennent respectivement des standards pour ['association d'un 
attribut avec un objet de fagon selective, en fonction des valeurs d'entree ; 

des regies d'analyse, dont certaines comprennent respectivement de la loglque pour ('association d'un 
attribut avec un objet de facon selective, en fonction des associations attribut/objet definies par d'autres 
40 regies parmi lesdites regies ; et 

des regies d'action dont certaines comprennent respectivement de la logique pour {'execution s6fective 
d'une commande externe en fonction dissociations objet/attribut effectuees par certains autres types de 
regies parmi lesdits types de regies. 



45 24, Un appareil informatique pour la commande et le contr6le dun processus sensibiement continu (1 60), cornprenant ; 



(a) un ou plusieurs capteurs (156) pour capter des conditions du processus (160) et un ou plusieurs organes 
d'actionnement (158) pour varier des conditions du processus (180) ; 

(b) un contr6ieur de processus (1 54) pour la commande d'un ou de plusieurs desdits organes d'actionnement 
so (158) en correspondance a des donnees captees, gene>ees par au moins un parmi lesdsts capteurs (156) et 

en correspondance k des parametres de commande respect its ; 

(c) des moyens de supervision du processus (130) agences pour recevoirdes donnees indirectement eVou 
directement a partir dudit processus et susceptibles de foncttonner pour surveiller le fonction nam ent dudit 
contrSleurde processus par la definition selective d'un ou de plusieurs desdits parametres de commande en 

ss fonction desdites donnees recues ; 



caracterise en ce qu'une pluratite de moyens de sous-procedure experte (120) sont prevus dont chacun 
effectue une tache experte respectivement differente concernant le processus, utilisant une base de connaissance 
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et une structure conference concernant le processus et pour fournir en sortie cies donnees de conseil expertes ; 
et en ce que 

lesdits moyens de supervision du processus (130) sont susceptibles de fonctionner independamment dudit 
controleur de processus (154) et comprennent : (i) une pluraiite de modules iogiciels sensibiement autonomes> 
chaque module definissant une procedure pour la realisation d'une tache souhaitee : et (ii) des moyens pour ap~ 
peler, sous des conditions predefines au moins un parm! ladite pluraHte de moyens de sous-procedure experte, 
qui fourntssent en sortie lesdites donnees de conseil expert pour utilisation par lesdits moyens de supervision de 
processus (130) pour ia definition selective d'un ou de plusieurs des parametres de commande. 

25. L'appareil de la revendication 24, dans lequel lesdits moyens de supervision du processus (130) presentent une 
periode maximaJe d'iteration qui est sensibiement plus longue que la periode maximale d'iteratlon dudit contrdleur 
de processus. 

26. L'appareil de la revendication 24 ou la revendication 25, comprenant une base de donnees historiques (140) 
contenant au moms une donnee horodatee concernant le processus, 

27. L'appareil de la revendication 24, 25 ou 26, dans lequel lesdits moyens de supervision de processus {1 30) utiiisent 
un trattement par lots qui comprend un etat temporise de sommeii, et la duree dudit etat de sommeii est sufrisam- 
ment grande pour que ledit processus par lots n'occupe pas, en moyenne. plus de 50 % du temps CPU disponibie 
de I'ordinateur sur lequel s'executent lesdits moyens de supervision de processus (130) ; e1 dans lequel la duree 
dudit etat de sommeii est choisie afin d'etre surfisamment courte pour que des fluctuations au niveau du processus 
ne peuvent pas s'ecarter vers une situation qui est non maitrisee par la commande pendant les periodes ou ledit 
processus par lots est en sommeii 

28. L'appareil de la revendications 24, 25 ou 26, dans lequel ledit contrdleur de processus (154) fonctionne sensibie- 
ment de facon continue en temps reef, et dans lequel un ou plusieurs desdits moyens de sous-procedure experte 
(120) ne fonctionnent pas en continu en temps reel. 

29. L'appareil de la revendication 24, 25 ou 26 } dans lequel ledit controleur de processus comprend de la logique 
temps reel, et dans lequel un ou plusieurs desdits moyens de sous~proc6dure experte (120) sont executes de 
facon recurrente en tant que traitements par lots. 

30. L'appareil selon i'une quelconque des revendications 24 a 29, dans lequel ladite pluraiite de moyens de sous- 
procedure experte (1 20) sont configures sous forme d'un ordinateur executant un ou plusieurs programmes, com- 
prenant un procede cyclique effectuant I'echantiflonnage rep§titif d'une pluraiite de slgnaux correspondant a des 
entrees, et qui fait des inferences a partir desdites entries en correspondance a une base de connaissance stoc- 
kee, et qui fournit des sorties en correspondance auxdites inferences, et passe ensuite dans un etat de sommeii 
qui presente une duree predeterminee suffisamment longue pour que ledit processus n'occupe pas, en moyenne, 
plus de 50 % du temps CPU disponibie de I'ordinateur et qui est suffisamment courte pour que des fluctuations 
au niveau du processus ne peuvent pas diverger vers une situation qui n'est pas maitrisee par la commande 
pendant des periodes ou lesdits moyens de sous-procedure experte sont en sommeii. 

31. L'appareil selon I'une quelconque des revendications 24 a 30, dans lequel ledit contrdleur de processus (154) 
comprend un controleur analogique. 

32. L'appareil selon i'une quelconque des revendications 24 a 31 , dans lequel un ou plusieurs desdits parametres de 
commande constituent un but ou une valeur cible pour ledit contrSleur de processus (154). 

33. L'appareil selon I'une quelconque des revendications 24 a 32, dans lequel ledit controleur de processus (154) et 
lesdits moyens de supervision de processus (1 30) comprennent des traitements qui sont executes sur le meme 
systerne informatique. 

34. L'appareil selon I'une quelconque des revendications 24 a 33, dans lequel ledit contrdleur de processus (154) et 
lesdits moyens de supervision de processus (1 30) sont tous les deux des parties respectives du meme systerne 
de fogicieL 

35. L'appareil selon Tune quelconque des revendications 24 a 34, dans lequel ladite pluraiite de modules bgiciels sont 
definis par des definitions de donnees respectives, comprenant des pointeurs vers des premiers moyens pour 
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effectuer une fonction respective, et, en ce qui concern® au moins certains desdits modules logiciels, des para- 
metres qui sont a passer auxdits premiers moyens qui sont references par pointeur 

36. L'appareil selon f'une quelconque des revendtcations 24 a 34, dans lequel ladite pluraiite de modules logiciels est 
s definie par des definitions de donnees respective, comprenant des pointeurs vers des premiers moyens pour 

effectuer une fonction respective dans lequel la plupart desdits premiers moyens references par pojnteur corres- 
pondent g&neralement a un parmi un nombre limits de types de procedure, et dans lequel au moins certains desdits 
premiers moyens references par pointeur contient egalement des pointeurs supplementaires vers des deuxiemes 
moyens qui ne correspondent generalement a aucun dudit nombre firnite de types de procedure, et t en ce qui 
10 concerne au moins certains desdits modules logiciels, des parametres a passer vers lesdits premiers moyens 

references par pointeur. 

37. L'appareil seion I'une quelconque des revendications 24 a 36, comprenant des moyens experts construits (110) 
configures pour : 

is 

(i) suite a une commande ; presenter selectivement a un utilisateur une structure fonctionnelle pour une nou~ 
veils regie pour un moyen selectionne parmi lesdits moyens de sous-procedure experts (120) ; 

(ii) suite a une commands, presenter select ivement a un utilisateur une structure fonctionnelle correspondant 
a Tentree fournie par I'utilisateur a partir de laquelle a ete generee une version actuefle desdits moyens des 

20 sous-procedures expertes {120) ; 

(iii) et pour compiler selectivement une ou plusieurs entrees obtenues de I'utilisateur a partir de ladite structure 
fonctionnelle pour obtenir une nouvelle versbn desdits moyens de sous-procedure expert e se lection nes (1 20). 

38. L'appareil de la revendication 37, dans lequel ladite structure fonctionnetie presentee a I'utilisateur possede un 
25 format sensiblement sous forme de langage naturel qui estfacilement comprehensible a un utilisateur qui presents 

une aptitude technique dans un art predetermine rnais qui n'est pas forcement competent dans un langage infor- 
matique quelconque. 

39. L'appareil de la revendication 37 ou 38 } dans lequel uniquement des parties limiteesde ladite structure fonctionneile 
so sont susceptibles d'etre changees par f utilisateur. 

40. L'appareil selon Tune quelconque des revendications 37 a 39, dans fequef ladite structure fonctionnelle comprend 
des parlies susceptibles d'etre changees par I'utifisateur qui se presentent differemment audit utilisateur par rapport 
a d'autres parties de ladite structure fonctionnelle. 

35 

41 - L'appareil selon Tune quelconque des revendications 37 a 40, dans lequel ladite structure fonctionnelle utilise des 
definitions standardises d'interface de donnees telle que I'utilisateur puisse specifier des donnees presentant 
une parmi una pfuralite de caracteristiques temporelles predefines. 

40 42. L'appareil sefon f'une quelconque des revendications 24 a 41 , comprenant des moyens de supervision construits 
(810) qui sont configures pour : 

(i) suite a une commands, a presenter selectivement a f'utilisateur une structure fonctionnelle pour un nouveau 
module logiciel pour lesdits moyens de supervision de processus (130) ; 
45 suite a une commands a presenter a I'utilisateur une structure fonctionnelle correspondant a une entree 

fournie par f'utilisateur a partir de laquelle a ete genere un module logiciel actuel desdits moyens de supervision 
de processus (130) ; 

(iii) et pour charger selectivement Tentree fournie par I'utilisateur a partir de ladite structure fonctionnelle a 
sirs utilisee par lesdits moyens de supervision de processus {130}. 

so 

43. L'appareil de la revendication 42 : dans lequel lesdits moyens de supervision construits (810) ns permettent pas 
un acces actif par lesdits moyens de supervision de processus (130) a des donnees qui correspondent a des 
entrees nouvelles fotirnies par I'utilisateur jusqu'au moment ou une validation a ete effectuee, 

£5 44. L'appareil de ia revendication 42 ou 43, dans lequel lesdits moyens de supervision de processus (1 30) utilise des 
moyens permettant un cyclage, et iedit controleur de processus (154) fonctbnne sensiblement en temps reel. 

45. L'appareil selon i'une quelconque des revendications 24 a 44, dans lequel ladite base de connaissance et ia 
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10 



structure d'inference definissent un systeme de commande et de contrdle expert (120) qui est sensiblement du 
type temps reel. 

46. Uapparet! seion rune quelconque des revendications 24 a 44, dans iequei ledit contrSleur de processus (154) 
fonctionne sensiblement en continu et en temps reel et dans lequel un ou plusieurs parmi lesdits moyens de sous- 
procedure experte (120) ne fonctionnement pas en continu, en temps reel, 

47. L'appareN selon ['une quelconque des revendications 24 a 44, dans lequel un ou plusieurs desdits moyens de 
sous-procedure experte (120) comprennent : 



une collection de regies d'inf erence consistent en des regies d'extraction dont certaines comprennent respec- 
tivement des standards pour ('association d'un attribut avec un objet de facon selective, en correspondence 
avec des valeurs d'entree ; 

des regies d'analyse, dont certaines respectivement comprennent la logique pour {'association d l un attribut 
75 avec un objet de facon selective en corresponclance a un ou plusieurs autres attfibuts assocjes a des objets 

par d'autres regies parmi lesdites regies ; 

des regies d'actlon dont certaines comprennent respectivement la logique pour ['execution d'un e com mande 
externe de facon selective en correspondance a un ou plusieurs autres attributs assocjes a des objets f par 
d'autres regies parmi lesdites regies ; 

20 un processeur qui est connecte pour recevoir des entrees a partir d'un canal d'entree, pour executer ladite 

collection de regies d'inference sur lesdites entrees et pour fournir des sorties vers un canal de sortie en 
correspondance, dans lequel ledit processeur n'est pas connecte afin de n'effectuer aucun test purement 
arithmetique lors de ['execution desdites regies d'analyse, nl lors de ['execution desdites regies d'action ; 
et dans iequei ledit processeur n'est pas connecte afin d'evaiuer aucune expression logique presentant trois, 

2S ou plus de trois termes d'entree lors de rexecution desdites regies d'action. 

48. Un apparei) pour la construction de moyens de sous-procedure experte (120) dans un appareil seion Tune quel- 
conque des revendications 24 a 47, comprenant : 

30 de la logique de generation de regies qui, iorsqu'elle est activee, fournit a I'utilisateur, via une interface inte- 

ractive, des gabarits pour au moins trois differents types de regies, comprenant : 

des regies d'extraction, dont certaines comprennent respectivement des standards pour ['association d'un 

attribut avec un objet, de facon selective, en correspondance a des valeurs d'entree ; 

des regies d'analyse, dont certaines comprennent respectivement la logique pour ['association d'un attribut 
35 avec un objet, de facon selective, en correspondance avec d'autres associations objet/attribut ; et 

des regies d'action dont certaines comprennent respectivement la logique pour ['execution d'une commande 
externe de facon selective en correspondance a d'autres associations objet/attribut ; 

dans Iequei lesdites regies respectives sent presentees a f'utilisateur sous forme de gabarits qui presentent 
un format qui est facilement comprehensible par un utiiisateur qui n'est pas forcement competent dans un 
40 langage informatique quelconque ; 

dans lequel uniquement des parties iimitees desdits gabarits sont susceptibles d'etre changees par 
i'utilisateur ; 

et dans Iequei ladite logique de generation de regies traduit des entrees fournies par I'utilisateur en corres- 
pondance auxdits gabarits pour former un jeu executable de regies qui definissent lesdits moyens de sous- 
es procedure experte (120). 

49. Un appareil pour la construction d'un systeme expert dans un appareil selon Tune quelconque des revendications 
24 a 47, comprenant : 

de la logique de generation de regies, qui, Iorsqu'elle est activee, fournit a i'utilisateur des structures tone- 
so tionnelles pour des regies en correspondance a un jeu lirnite de types predetermines, dans lequel ladite logique 

de generation de regies presente lesdites structures fonctionnelles pour la totalite desdites regies sous un format 
qui est facilement comprehensible par un utiiisateur qui n'est pas forcement competent dans un langage informa- 
tique quelconque, et qui n'est pas susceptible d'etre change par f'utilisateur sauf dans des parties Iimitees ; et dans 
lequel ladite logique de generation de regies traduit des entries foumies par rutilisaieur en correspondance auxdi- 
55 tes structures fonctionnelles pour former un jeu executable complet de regies qui definissent iesdits moyens de 

sous-procedure experte (120). 
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